Linux br942.hostgator.com.br 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64
Apache
: 162.241.2.188 | : 3.135.182.75
Cant Read [ /etc/named.conf ]
8.2.22
manoe678
May The Force Be With You
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
MASS DEFACE
+ Create Folder
+ Create File
/
var /
cache /
yum /
x86_64 /
7 /
centos7-els /
gen /
[ HOME SHELL ]
Name
Size
Permission
Action
filelists_db.sqlite
70.27
MB
-rw-r--r--
other_db.sqlite
32.29
MB
-rw-r--r--
primary_db.sqlite
73.44
MB
-rw-r--r--
updateinfo.xml
1013.01
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : other_db.sqlite
SQLite format 3 @ K .K� � �M�2 � � @ YindexpkgIdpackages 'CREATE INDEX pkgId ON packages (pkgId)K eindexkeychangechangelog �CREATE INDEX keychange ON changelog (pkgKey)� / �triggerremove_changelogspackagesCREATE TRIGGER remove_changelogs AFTER DELETE ON packages BEGIN DELETE FROM changelog WHERE pkgKey = old.pkgKey; ENDv �;tablechangelogchangelogCREATE TABLE changelog ( pkgKey INTEGER, author TEXT, date INTEGER, changelog TEXT)^ �tablepackagespackagesCREATE TABLE packages ( pkgKey INTEGER PRIMARY KEY, pkgId TEXT)Q{tabledb_infodb_infoCREATE TABLE db_info (dbversion INTEGER, checksum TEXT) � � E� cec4611d02a6721006d0a24da2306a2d5a6da5ca6180ec7200dae35e7f1253dc $* n���������������������~xrlf`ZTNHB<60* �` K�( �p �8 )� i�H �� e�X � ��h :�0 ʊx Ɋ@ k� ��P 9� �` و( ~�p �8 S� ��H � j�X &� ��h j�0 �x ��@ �� >�P =� �` �( �p �8 � ������������������� =��u ���* ��_ ���E � ^��1 ̆�p 1��a ���b ��q `��y |�� ۃ� K��T ���d ۂ�k ��a �G c �,��/ � d � m H � r (�r �S ��*��*�] �c S cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68Ha5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYaWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cScIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800PcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixecmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68Ha5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�" �!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cR cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211P cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800O cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixd cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againc ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''g csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsI c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68G a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesX aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)x a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) � � � ^ � ^ � � ? � �qP�z0�z�[� � �#7�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS6cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q5cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P4cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe3cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd2ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h1csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ0c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H/a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY.aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y-a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)� ,��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#+�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS*cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q)cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P(cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe'cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd&ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h%csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ$c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H#a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY"aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)� !��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�# �!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.c � �*��* � ] � c = � � L�|�p��y/�y�Z � SVcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QUcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800PTcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixeScmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdRckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hQcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJPc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68HOa5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYNaWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)� M��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#L�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cSKcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QJcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800PIcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixeHcmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdGckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hFcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJEc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68HDa5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYCaWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#B�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cSAcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q@cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P?cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe>cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd=ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h<csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ;c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H:a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY9aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y8a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) B � � > � � M � } � q �{ �� �S�Y3 � � B Jqc7 Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68Hpa5 Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYoaW Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#n�!�' Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cSmcI Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QlcE Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800PkcC Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixejcm Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdick Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hhcs Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJgc7 Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68Hfa5 Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYeaW Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)yda� Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�#c�!�' Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cSbcI Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QacE Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P`cC Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe_cm Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd^ck Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h]cs Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ\c7 Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H[a5 Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYZaW Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)yYa� Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)� X��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#W�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.c s �0�w$ � � � - � � -�` �c<�B��?�p � s S�cI Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q� cE Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P� cC Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cm Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ck Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� cs Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7 Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5 Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a� Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)� ���# Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#��!�' Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�cI Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�cE Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P� cC Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixecm Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd~ck Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h}cs Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ|c7 Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H{a5 Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesYzaW Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)� y��# Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#x�!�' Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cSwcI Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211QvcE Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800PucC Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixetcm Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againdsck Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''hrcs Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts � � ] � i � � / � � 2 �d�E��6���; � � J�(c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�'a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�&aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)� �%��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#�$�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�#cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�"cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�!cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H� a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#��!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�#��!�' Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.c � �.�s � � � � ] �>��/��V �S��1�� S�DcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�CcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�BcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�AcmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�@ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�?csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�>c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�=a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�<aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#�;�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�:cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�9cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�8cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�7cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�6ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�5csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�4c7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�3a5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�2aWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�1a�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)� �0��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#�/�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�.cIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�-cEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�,cCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�+cmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�*ckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�)csJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts u � � ; � � G � u � f ��B��#�h�� u � �\��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#�[�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�ZcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�YcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�XcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�WcmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�VckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�UcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Tc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Sa5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�RaWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)�#�Q�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.cS�PcIJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�OcEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�NcCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�McmJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�LckJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�KcsJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Jc7Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ia5Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�HaWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Ga�Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)� �F��#Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 6.9.10.68-7.tuxcare.els2g1�- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent in quantum-export.c - CVE-2020-27768: fix NaN being outside the range of representable values issue in quantum-private.h�#�E�!�'Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.tuxcare.els1f-�- Fix CVE-2022-32546 integer overflow at at coders/pcl.c. - Fix CVE-2022-32545 outside the range of representable values at coders/psd.c. - Fix CVE-2022-32547 misaligned address at MagickCore/property.c. - Fix CVE-2021-20312 integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c - Fix CVE-2021-20313 cipher leak when the calculate signatures in TransformSignature - Fix CVE-2021-20309 division by zero in WaveImage() of MagickCore/visual-effects.c "% S�u � � . � l / � p � n � .�F��(���7�� �4�q~% V�~[WBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��}[�SBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�|U_Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�{K�Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�z]GBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�yS}Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�x]�Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��w]�YBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�v]5Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�uU5Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �tS�KCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�sO�1Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�rU]Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�qU5Bill Nottingham <notting@redhat.com>7��@- initscript munging`�pUqBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�oG�Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�nUWBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �mG�wJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�lU9Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�kGqJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�jM�wStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�iU�Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��hS�;Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�gS{Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�fOaPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�eS'Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�dSCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�cGkJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�bG�Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�aGkJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��`G�AJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�_G3Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �^O�oManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�]]�yScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h> $ � ��L � � ! � [ � � Y � � R�K� ���'�z�l.�r0�M � � `�"]iBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�!]kBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G� Y;Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf�� ]�QBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?� ]'Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp� ]�Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF� ]5Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]gBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�wBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�]ABernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��]�/Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�aBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�]�Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�M�{Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]uBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�]Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�IBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�]�Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?� ]'Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI� ];Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7� ]Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<� ]!Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=� M3Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�eOFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�ekFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�Y7Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�Q�)Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�[�IBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��U�=Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�Q�CNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�]-Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD� Q=Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�Q�{Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %pre � 9� � Z � � � V d 7�k�6�q����G � � [�?yCBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�>yMBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�=y�SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��<y�'Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�;y!Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�:y�sBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�9m�eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�8m�)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�7m�Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�6e?Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�5yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�4yUBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�3y+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�2y{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�1y�Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�0yOBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�/m�YBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�.y!Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�-mBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�,oCBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�+m�5Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�*]5Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�)QENalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�(]qBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�']MBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�&]�Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�%]�Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�$]�Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�#]�-Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements) # h �m1�z � � H � ; � � z �w��>��C��T�t��f � h L�b_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�a_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�`_aDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�_]?Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�^]7Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�]]� Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�\]5Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�[]9Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�Z];Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�Y]iDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�X]/Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�W]/Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�V_uDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�UE Tim Powers <timp@redhat.com>>.��- rebuilt\�T__Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Sc�Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�R_� Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�Q_gDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�P]eDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�OMUKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�N]SKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�M]�SKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�Lm%Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�KE3Tim Powers <timp@redhat.com>=@- automated rebuild9�JE3Tim Powers <timp@redhat.com><��- automated rebuild�7�Im�Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�He?Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�Gm]Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�Fm�}Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��E[�MElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�DmwBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�CEETim Powers <timp@redhat.com><QH�- rebuild against new libssl9�BE3Tim Powers <timp@redhat.com><<0�- automated rebuildA�AmBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�@{#Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10 , � L��y+ � o � ` � 8 � m * � k �� ��@ �m����*����:�D � � d�Q}Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN� QQJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%� Q�}Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J� _;Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N� _CDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP� _GDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K Elliot Lee <sopwith@redhat.com>@��- rebuiltq�_�Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�_CDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�_EDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�_�Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�__Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��_�1Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�]YDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2� K Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�eIFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�~GmTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�}]+Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�|K Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�{]7Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�z]CDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�y]/Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�x]kDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�w]+Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�ve/Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�ucODaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�teqFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�scEDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�rc#Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�qcWDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�pcyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�ocoDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�nceDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�m_WDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�l_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�k_}Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�j_GDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�i_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�h_}Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�g_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�f_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�eK Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�d_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�c_�Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/network C {G � Y � � C V � &y�H�D�� C �1�"q�uJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��!k�=Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x� e�Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7� k�Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L� k�1Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0� k�yJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-� s�kJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{�Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{WJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�s�cJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�UJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�mJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�QoJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�Q�!Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�Q�Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�MJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�QuJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServers $ �(� � p � � ���-%�#�$ x�4m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �3m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�2m�wJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�1m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �0m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��/m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�.k�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�-k�WJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�,k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�+s)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�*k�iJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�)u�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�(s�YJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�'s�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�&q�kJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�%qWJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�$qmNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�#qaJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() . P �3 � / � � � 5 � ?�p�Vi �~�� P �'�Jm�eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�Im�{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Hm�)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�Gm_Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�Fk�]Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�EkSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�Dk�kJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�CqcJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�Bk�qJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�AmWFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�@okJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��?k�AJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�>kQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��=q�Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�<S Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �;o�SJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��:m�AJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�9m�oJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�8m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�7cATomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�6m� Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �5m�/Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwarders 8 ww R � ��T��{�R�D�(�H � 8 }�^s� Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �]s�)Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�\s� Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�[sOMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Zs�Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�YsGMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Xs�Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Wm�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�VskFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Um�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Tm�9Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�SyAMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�RuYJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�Q{ Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Pu�GJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�Om�Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Nm?Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Mm�YJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Lm�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Km�!Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly �� � = � �l�Q�m� ��Lw �t�sc� Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�rc�CAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�qccAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�pcoAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�oc�Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��nc�CAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�mc�1Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�lc� Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�kc�Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�jc}Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�ic�oAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�hqoMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�gq�UMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��fq� Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�e}�_Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�dq�UMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �cq�%Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��bq� Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�aq�uMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��`q�?Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�_qcMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2) | � � � � X .���a�� � | j�_{Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�c�wAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�c�Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��_�1Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�c�Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�_�KAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�_EAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G� [�7Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��[�5Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�~[�Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�}[�sAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�|[�EAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�{cMAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�zcyAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�yc�Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��xc�CAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��wc�-Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�vcAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�uc�%Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�tc�yAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now G ��R � A � } � [ � Q��L�c�Y�� �D�� � G �-�#g�wAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��"g�KAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�!g?Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[� gUAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ� gAAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte� cmAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)�� g�MAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`� ccAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�oAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�=Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�iAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �g�1Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�c�Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�g�Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�+Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�euAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a�Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�eYAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb� eeAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,� a�{Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^� mUWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� � a�aAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"� _�iAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cgAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systems � H�g � � � % � 8 � H � x�)�1�H��V� � V�<gKAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�;c�YAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�:g]Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�9g%Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�8g;Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�7cSAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��6c�GAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�5c�=Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�4c�uAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��3c�-Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�2c�uAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �1c�[Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�0cuAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�/ceAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�.ceAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��-g�-Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��,g�GAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�+cEAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�*�1Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�)g-Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�(g�Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �'g�7Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�&gqAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�%c�Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�$c� Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch m m� t � � � O � ��d��� ��v � �` � m S�YeGAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Xi�MAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�We�Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�Ve�Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Ui� Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�TieAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�SiqAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�Re}Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�Qe� Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Pe�Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�OekAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�NeqAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�Me�Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Le}Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Ki�Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Je�WAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�IamAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�H]iAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�GaOAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�FaYAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �Ea�[Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�D]�Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��Ce�#Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�BekAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�AicAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�@e�gAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�?c�?Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�>g�Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��=c�?Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461) H �5 � � ] � V � ) � _�`������� D � H ��t� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�s[eAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�r[�+Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�q[�mAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�p[�Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�og1Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�ni�[Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��mi�KMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��le�%Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��kg�GAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�jc�=Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�icAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �ha�7Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�gakAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�fagAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��e�!�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �de�7Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�csACaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�baGAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�aaQAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�`[MAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�_gqAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�^kuMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�]k�Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�\g�cAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�[i[Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�ZemAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like it p {� q � S � - � � <�$�rn#2�V�K�9�� p ��e�SAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�c5Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��a�QAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k� a{Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH� a5Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O� _EJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~� _�!Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X� [[Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�[;Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �i�Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�i5Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�i]Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��i�'Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �i�/Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�e3Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V� eMAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�e3Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �~e�_Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�}e� Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�|e�Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�{e3Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�ze�SAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��ye�IAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�xa�kAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�wgATomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�ve�Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��ua�%Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully) " j � � � { � � � 5 W � H�H���X�b�Ps%�c�� � j X�4aUAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�3aUAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�2Y�Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�1[mAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�0g{Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�/gaAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�.gUAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�-g5Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�,[�[Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �+�+�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�*gyAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�)e=Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�(e�aAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�'eAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�&e3Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�%c� Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�$akAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�#a5Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��"e�'Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�!a� Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� � a�[Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l� a}Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z� a�WAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH� a5Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B� [/Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�%Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aqAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�aUAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a�Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[wAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�g� Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch K �U�^ ^ � � J � � !�T�V���A�/�D�b � K ��R�%�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Qs}Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�PaUAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��O[�/Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�N[�Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�M[�Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��L[�MAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�K[�Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�J[WAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �I[�AAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�HgSAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��Gg�'Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�Fg�Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�Eg5Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�DeWAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �Ce�WAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�BeWAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�AeyAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�@[qAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�?[yAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�>[WAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�=[�uAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�<g�Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�;g�eAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�:g�qAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�9aCAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��8a�%Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�7a�Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�6a=Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�5aWAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.so � ��� = � Q � / � � :�n��\��$�� � O�og=Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �ng�7Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�maeTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �la�]Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�km_Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��jm�9Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�im�3Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �hm�/Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�gg� Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�fgOAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�eg�Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�di�Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�ccYAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��bi�!Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�aa� Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�`aGAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�_g�Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�^a�qAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�]g?Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��\[�3Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�[[GAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�Z[5Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��Y[�WAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Xc?Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Wg�9Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �Vg� Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�UgiTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Tg� Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Sa5Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2 � #�: � ( � O � � ��v$�o��]L��� � � f� gkTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�oTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��g�!Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�k3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�gITomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �g�7Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�g� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�g�OTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�e?Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e� giHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�c3Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�~cqTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�}e?Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�|a� Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�{a�Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�za�cTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��ya�'Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�xa�UTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�waMTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�va�Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�uaiTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��ta�?Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�sg�Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�rgsTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�qg�Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�pg�OTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfully � ;J � X � R � k �����7G���5� � � � l�&ooPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�%oyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��$o�#Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��#o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�"o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �!o�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal�� o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`� oWPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z� oKPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� � o�OPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-� o�oPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�mPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�gMTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�wTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gWTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�gqTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g� gmTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)�� g�%Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m� g�wTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A� g� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753) ! x �+�= � ^ � � � q � " � 4�#�8���z����4�5 � x f�Gw[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�Fu3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��Eu�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�DuwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�CuUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�Bu� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�Au�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�@u[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��?u�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�>u�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�=o[Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�<o�sPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�;o3Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�:o;Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�9oiPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�8o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�7ooPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �6o�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�5o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�4oiPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��3o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�2uuMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�1o3Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�0o[Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�/o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�.oUPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�-ogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�,oaPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�+oPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�*o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�)osPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�(ouPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�'oWPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143 D � �/ � J � � � $ u � "�F�8�4�*h�Y � D� �eq�Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �d}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�c}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��b}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�a}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��`{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�_{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�^{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �]{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��\{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��[{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�ZwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�YwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�X{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�W{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �V{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�UwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Tw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Sw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�RwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Qw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Pw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��O}�Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Ns�eTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�MwsPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�LwiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Kw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�JwmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�IwgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�HsoPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803) # � r�$ � a � G � � I � Y ���Y�b��U�:�d~�T�� � � V�[WBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��[�SBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�U_Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�K�Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�]GBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�S}Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�]�Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��]�YBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF� ]5Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�U5Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �~S�KCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�}O�1Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�|U]Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�{U5Bill Nottingham <notting@redhat.com>7��@- initscript munging`�zUqBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�yG�Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�xUWBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �wG�wJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�vU9Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�uGqJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�tM�wStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�sU�Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��rS�;Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�qS{Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�pOaPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�oS'Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�nSCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�mGkJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�lG�Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�kGkJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��jG�AJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�iG3Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �hO�oManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�g]�yScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �f�Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341) $ � ��L � � ! � [ � � Y � � R�K� ���'�z�l.�r0�M � � `�,]iBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�+]kBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�*Y;Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��)]�QBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�(]'Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�']�Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�&]5Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�%] Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�$]gBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�#]�wBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�"]ABernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�!]_Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set�� ]�/Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;� ] Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� � ]�aBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o� ]�Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"� M�{Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]uBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�]Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�IBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�]�Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]'Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�];Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�]Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]!Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�M3Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�eOFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�ekFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�Y7Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�Q�)Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�[�IBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man�� U�=Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H� Q�CNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB� ]-Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD� Q=Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$� Q�{Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %pre � 9� � Z � � � V d 7�k�6�q����G � � [�IyCBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�HyMBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�Gy�SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��Fy�'Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�Ey!Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�Dy�sBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�Cm�eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�Bm�)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�Am�Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�@e?Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�?yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�>yUBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�=y+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�<y{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�;y�Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�:yOBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�9m�YBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�8y!Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�7mBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�6oCBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�5m�5Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�4]5Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�3QENalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�2]qBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�1]MBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�0]�Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�/]�Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�.]�Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�-]�-Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements) # h �m1�z � � H � ; � � z �w��>��C��T�t��f � h L�l_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�k_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�j_aDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�i]?Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�h]7Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�g]� Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�f]5Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�e]9Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�d];Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�c]iDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�b]/Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�a]/Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�`_uDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�_E Tim Powers <timp@redhat.com>>.��- rebuilt\�^__Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�]c�Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�\_� Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�[_gDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�Z]eDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�YMUKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�X]SKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�W]�SKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�Vm%Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�UE3Tim Powers <timp@redhat.com>=@- automated rebuild9�TE3Tim Powers <timp@redhat.com><��- automated rebuild�7�Sm�Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�Re?Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�Qm]Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�Pm�}Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��O[�MElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�NmwBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�MEETim Powers <timp@redhat.com><QH�- rebuild against new libssl9�LE3Tim Powers <timp@redhat.com><<0�- automated rebuildA�KmBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�J{#Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10 , � L��y+ � o � ` � 8 � m * � k �� ��@ �m����*����:�D � � d�Q}Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�}Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_;Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�_CDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�_GDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K Elliot Lee <sopwith@redhat.com>@��- rebuiltq�_�Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�_CDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�_EDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�_�Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\� __Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen�� _�1Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX� ]YDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2� K Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT� eIFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�GmTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�]+Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�K Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�]7Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�]CDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�]/Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�]kDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�]+Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G� e/Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�cODaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�~eqFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�}cEDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�|c#Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�{cWDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�zcyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�ycoDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�xceDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�w_WDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�v_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�u_}Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�t_GDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�s_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�r_}Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�q_=Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�p_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�oK Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�n_?Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�m_�Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/network C {G � Y � � C V � &y�H�D�� C �1�,q�uJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��+k�=Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�*e�Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�)k�Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�(k�1Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�'k�yJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�&s�kJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�%s� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�${�[Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�#{�Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�"{WJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�!s�cJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .�� Q�UJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� � Q�mJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]� QoJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw� Q�!Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q� Q�Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�MJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�QuJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServers $ �(� � p � � ���-%�#�$ x�>m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �=m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�<m�wJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�;m�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �:m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��9m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�8k�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�7k�WJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�6k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�5s)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�4k�iJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�3u�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�2s�YJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�1s�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�0q�kJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�/qWJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�.qmNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�-qaJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() . P �3 � / � � � 5 � ?�p�Vi �~�� P �'�Tm�eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�Sm�{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Rm�)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�Qm_Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�Pk�]Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�OkSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�Nk�kJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�MqcJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�Lk�qJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�KmWFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�JokJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��Ik�AJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�HkQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��Gq�Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�FS Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �Eo�SJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��Dm�AJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�Cm�oJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�Bm�Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�AcATomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�@m� Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �?m�/Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwarders 8 ww R � ��T��{�R�D�(�H � 8 }�hs� Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �gs�)Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�fs� Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�esOMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�ds�Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�csGMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��bs�Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��am�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�`skFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�_m�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��^m�9Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�]yAMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�\uYJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�[{ Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Zu�GJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�Ym�Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Xm?Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Wm�YJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Vm�Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Um�!Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly �� � = � �l�Q�m� ��Lw �t�}c� Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�|c�CAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�{ccAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�zcoAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�yc�Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��xc�CAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�wc�1Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�vc� Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�uc�Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�tc}Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�sc�oAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�rqoMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�qq�UMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��pq� Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�o}�_Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�nq�UMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �mq�%Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��lq� Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�kq�uMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��jq�?Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�iqcMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2) | � � � � X .���a�� � | j�_{Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�c�wAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�c�Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��_�1Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q� c�Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S� _�KAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O� _EAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G� [�7Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init�� [�5Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�[�Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�[�sAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�[�EAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�cMAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�cyAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�c�Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��c�CAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��c�-Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n� cAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�c�%Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�~c�yAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now G ��R � A � } � [ � Q��L�c�Y�� �D�� � G �-�-g�wAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��,g�KAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�+g?Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�*gUAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�)gAAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�(cmAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��'g�MAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�&ccAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�%cQAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�$c� Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��#g�9Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�"c�oAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��!g�=Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&� g�iAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� � g�1Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7� g� Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8� c�Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=� g�Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�+Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�euAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a�Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�eYAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�eeAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mUWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�aAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�_�iAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cgAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systems � H�g � � � % � 8 � H � x�)�1�H��V� � V�FgKAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�Ec�YAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�Dg]Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�Cg%Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�Bg;Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�AcSAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��@c�GAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�?c�=Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�>c�uAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��=c�-Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�<c�uAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �;c�[Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�:cuAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�9ceAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�8ceAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��7g�-Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��6g�GAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�5cEAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�4�1Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�3g-Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�2g�Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �1g�7Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�0gqAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�/c�Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�.c� Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch m m� t � � � O � ��d��� ��v � �` � m S�ceGAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��bi�MAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�ae�Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�`e�Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��_i� Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�^ieAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�]iqAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�\e}Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�[e� Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Ze�Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�YekAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�XeqAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�We�Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Ve}Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Ui�Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Te�WAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�SamAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�R]iAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�QaOAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�PaYAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �Oa�[Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�N]�Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��Me�#Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�LekAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�KicAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�Je�gAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�Ic�?Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�Hg�Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��Gc�?Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461) H �5 � � ] � V � ) � _�`������� D � H ��~� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�}[eAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�|[�+Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�{[�mAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�z[�Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�yg1Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�xi�[Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��wi�KMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��ve�%Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��ug�GAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�tc�=Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�scAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �ra�7Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�qakAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�pagAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��o�!�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �ne�7Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�msACaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�laGAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�kaQAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�j[MAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�igqAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�hkuMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�gk�Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�fg�cAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�ei[Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�demAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like it p {� q � S � - � � <�$�rn#2�V�K�9�� p �� e�SAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�c5Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��a�QAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_EJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�!Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�[[Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�[;Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �i�Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�i5Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�i]Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)�� i�'Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� � i�/Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI� e3Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V� eMAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI� e3Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �e�_Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�e� Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�e�Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�e3Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�e�SAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��e�IAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�a�kAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�gATomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr� e�Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��a�%Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully) " j � � � { � � � 5 W � H�H���X�b�Ps%�c�� � j X�>aUAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�=aUAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�<Y�Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�;[mAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�:g{Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�9gaAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�8gUAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�7g5Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�6[�[Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �5�+�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�4gyAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�3e=Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�2e�aAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�1eAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�0e3Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�/c� Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�.akAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�-a5Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��,e�'Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�+a� Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �*a�[Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�)a}Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�(a�WAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�'a5Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�&[/Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�%g5Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��$e�%Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�#e� Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�"aqAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�!aUAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y� a�Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH� a5Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f� [wAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv� g� Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch K �U�^ ^ � � J � � !�T�V���A�/�D�b � K ��\�%�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�[s}Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�ZaUAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��Y[�/Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�X[�Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�W[�Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��V[�MAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�U[�Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�T[WAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �S[�AAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�RgSAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��Qg�'Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�Pg�Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�Og5Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�NeWAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �Me�WAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�LeWAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�KeyAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�J[qAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�I[yAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�H[WAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�G[�uAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�Fg�Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�Eg�eAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�Dg�qAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�CaCAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��Ba�%Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�Aa�Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�@a=Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�?aWAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.so � ��� = � Q � / � � :�n��\��$�� � O�yg=Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �xg�7Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�waeTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �va�]Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�um_Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��tm�9Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�sm�3Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �rm�/Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�qg� Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�pgOAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�og�Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�ni�Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�mcYAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��li�!Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�ka� Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�jaGAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�ig�Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�ha�qAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�gg?Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��f[�3Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�e[GAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�d[5Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��c[�WAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�bc?Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�ag�9Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �`g� Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�_giTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�^g� Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�]a5Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2 � #�: � ( � O � � ��v$�o��]L��� � � f�gkTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�oTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��g�!Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�k3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�gITomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �g�7Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x� g� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y� g�OTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O� e?Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e� giHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H� c3Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�cqTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�e?Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�a� Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�a�Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�a�cTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��a�'Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�a�UTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�aMTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q� a�Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�aiTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��~a�?Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�}g�Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�|gsTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�{g�Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�zg�OTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfully � ;J � X � R � k �����7G���5� � � � l�0ooPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�/oyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��.o�#Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��-o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�,o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �+o�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��*o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�)oWPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�(oKPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �'o�OPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�&o�oPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�%o�mPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�$g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�#g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�"g�+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�!gMTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!� g�_Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m� g�wTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\� gWTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J� g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J� g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�gqTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�g3Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gmTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��g�%Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�wTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753) ! x �+�= � ^ � � � q � " � 4�#�8���z����4�5 � x f�Qw[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�Pu3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��Ou�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�NuwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�MuUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�Lu� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�Ku�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�Ju[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��Iu�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�Hu�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�Go[Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�Fo�sPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�Eo3Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�Do;Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�CoiPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�Bo� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�AooPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �@o�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�?o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�>oiPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��=o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�<uuMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�;o3Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�:o[Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�9o�Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�8oUPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�7ogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�6oaPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�5oPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�4o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�3osPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�2ouPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�1oWPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143 D � �/ � J � � � $ u � "�F�8�4�*h�Y � D� �oq�Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �n}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�m}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��l}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�k}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��j{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�i{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�h{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �g{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��f{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��e{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�cwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�b{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�a{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �`{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�_wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�^w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�]w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�\wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��[w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Zw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��Y}�Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Xs�eTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�WwsPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�VwiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Uw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�TwmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�SwgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�RsoPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803) � rl � h � ^ � � � � w��<�2p�a�K�s � � l�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y��[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>� }�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�~{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�}{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7�|�'�IDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �{s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��zs�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �y}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�x}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��w}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�v}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��u{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�t{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�s{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �r{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q� �iPavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �p�Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341) � e� � ~ � � * B�3� �E��� � �"� � �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"��)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>� }�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � c�` � N � a �z�V�@�h�� � �"�1� �' Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�0�)�S Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�/�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�.�[ Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�-s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �,s�# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��+s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �*}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�)}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.�(��CLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�'� �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�&�)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�%�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�$�[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�#s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �"s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��!s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) N N� � � � 3 L&t����5N �=�D�)�S Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�C�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�B�[ Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�As� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �@s�# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��?s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�1�>�'�= Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�=��E Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�<��C Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�;� �' Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�:�)�S Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�9�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�8�[ Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�7s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �6s�# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��5s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �4}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-�3��E Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�2��C Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11 F �( w � � � O � 3�r �t � '����(��'e � � FF�c]5 Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�bU5 Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �aS�K Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�`O�1 Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�_U] Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�^U5 Bill Nottingham <notting@redhat.com>7��@- initscript munging`�]Uq Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�\G� Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�[UW Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �ZG�w Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�YU9 Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�XGq Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�WM�w Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�VU� Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��US�; Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�TS{ Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�SOa Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�RS' Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�QS Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�PGk Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�OG� Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�NGk Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��MG�A Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�LG3 Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �KO�o Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�J]�y Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!�I�'� Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1�H�'�= Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�G��E Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�F��C Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�E� �' Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils " � c��9 � n � | T � � q� �o��\�\��"| i+�E � L�]A Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_ Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��]�/ Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�a Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o� ]� Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�M�{ Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�~]u Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�}] Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��|]�I Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�{]� Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�z]' Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�y]; Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�x] Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�w]! Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�vM3 Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�ueO Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�tek Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�sY7 Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�rQ�) Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�q[�I Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��pU�= Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�oQ�C Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�n]- Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�mQ= Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�lQ�{ Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�k[W Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��j[�S Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�iU_ Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�hK� Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�g]G Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�fS} Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�e]� Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��d]�Y Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bind } T��k � � � o E � "�f���bp C�w�B� } �I�%m�) Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�$m� Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�#e? Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�"y Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�!yU Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O� y+ Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w� y{ Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E� y� Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa� yO Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!� m�Y Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�y! Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�]5 Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QE Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�]q Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]M Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�]� Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�]� Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]� Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�- Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G� Y; Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf�� ]�Q Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?� ]' Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp� ]� Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF� ]5 Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]g Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�w Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bind X U] ~ � s � � F � ��] P��5��+��S � � X g�C_u Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�BE Tim Powers <timp@redhat.com>>.��- rebuilt\�A__ Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�@c� Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�?_� Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�>_g Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�=]e Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�<MU Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�;]S Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�:]�S Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�9m% Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�8E3 Tim Powers <timp@redhat.com>=@- automated rebuild9�7E3 Tim Powers <timp@redhat.com><��- automated rebuild�7�6m� Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�5e? Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�4m] Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�3m�} Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��2[�M Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�1mw Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�0EE Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�/E3 Tim Powers <timp@redhat.com><<0�- automated rebuildA�.m Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�-{# Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�,yC Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�+yM Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�*y�S Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��)y�' Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�(y! Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�'y�s Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�&m�e Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009) - � �t�z1 � q # � t % q " � � P � � A��*�]��O��7��E��e0��;�! � \�p__ Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��o_�1 Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�n]Y Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�mK Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�leI Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�kGm Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�j]+ Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�iK Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�h]7 Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�g]C Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�f]/ Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�e]k Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�d]+ Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�ce/ Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�bcO Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�aeq Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�`cE Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�_c# Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�^cW Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�]cy Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�\co Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�[ce Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�Z_W Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�Y_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�X_} Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�W_G Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�V_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�U_} Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�T_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�S_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�RK Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�Q_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�P_� Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�O_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�N_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�M_a Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�L]? Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�K]7 Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�J]� Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�I]5 Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�H]9 Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�G]; Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�F]i Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�E]/ Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�D]/ Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2 � �;�vA � � P � V � j 6 � H��2E�h�7� �0� k�y Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-� s�k Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[ Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{W Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�s�c Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�U Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�m Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�Qo Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw� Q�! Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�Q� Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�~Q�M Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�}Qu Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��|Q�5 Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�{Q} Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�zQQ Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�yQ�} Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�x_; Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�w_C Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�v_G Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�uK Elliot Lee <sopwith@redhat.com>@��- rebuiltq�t_� Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�s_C Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�r_E Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�q_� Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root � � � z d � F � s�G p�69V � w�k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�k�W Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s) Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�k�i Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�e Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�s�Y Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�q�k Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qW Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qm Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qa Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�= Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x� e� Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7� k� Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L� k�1 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs ` � j � � r � � *�&���,�6�g�M ` �i�1k�k Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�0qc Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�/k�q Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�.mW Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�-ok Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��,k�A Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�+kQ Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��*q� Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�)S Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �(o�S Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��'m�A Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�&m�o Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�%m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�$cA Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�#m� Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �"m�/ Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�!m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� � m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p� m�w Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}� m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� � m�+ Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option�� m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms b �{ � � � ^ ^9�h�;�wb ��Am�9 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�@yA Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�?uY Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�>{ Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�=u�G Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�<m� Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�;m? Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�:m�Y Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�9m� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��8m�! Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�7m�e Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�6m�{ Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �5m�) Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�4m_ Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�3k�] Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�2kS Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � F � R � l � L � = � S���m�X�) � m�Uqo Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Tq�U Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��Sq� Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�R}�_ Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Qq�U Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �Pq�% Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Oq� Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Nq�u Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Mq�? Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�Lqc Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Ks� Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Js�) Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Is� Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�HsO Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Gs� Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�FsG Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Es� Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Dm� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�Csk Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Bm� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. � U�q � $ � � P { �S� �}I��� � �y�k[� Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�j[�s Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�i[�E Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�hcM Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�gcy Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�fc� Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��ec�C Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��dc�- Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�cc Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�bc�% Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�ac�y Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�`c� Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�_c�C Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�^cc Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�]co Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�\c� Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��[c�C Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Zc�1 Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Yc� Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Xc� Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Wc} Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Vc�o Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � Y � � � t i�e�P�<�� N � � �g�1 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8� c� Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�g� Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�~c�+ Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�}eu Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�|a� Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�{eY Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�zee Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�ya�{ Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�xmU Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �wa�a Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�v_�i Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�ucg Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�t_{ Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�sc�w Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�rc� Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��q_�1 Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�pc� Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�o_�K Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�n_E Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�m[�7 Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��l[�5 Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup � V� � � P � L � � G ��C�b��� �3�C�s�$ � �� c�- Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*� c�u Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� � c�[ Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i� cu Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a� ce Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ce Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�- Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cE Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d��1 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g- Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�g� Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �g�7 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�gq Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�c� Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�c� Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�g�w Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�K Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g? Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[� gU Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ� gA Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte� cm Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)�� g�M Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`� cc Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQ Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�o Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�= Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�i Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � @ � N � � U u � 8�*�<� �k�� n�9e} Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�8i� Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �7e�W Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�6am Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�5]i Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�4aO Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�3aY Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �2a�[ Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�1]� Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��0e�# Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�/ek Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�.ic Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�-e�g Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�,c�? Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�+g� Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��*c�? Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�)gK Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�(c�Y Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�'g] Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�&g% Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�%g; Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�$cS Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��#c�G Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�"c�= Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�!c�u Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � �- � � � � ) � m�z���+�~*�@�?�K � n�Vc Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �Ua�7 Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�Tak Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�Sag Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��R�!� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �Qe�7 Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�PsA Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�OaG Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�NaQ Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�M[M Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�Lgq Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�Kku Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Jk� Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Ig�c Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Hi[ Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�Gem Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�FeG Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Ei�M Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�De� Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�Ce� Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Bi� Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�Aie Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�@iq Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�?e} Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�>e� Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�=e� Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�<ek Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�;eq Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�:e� Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) � .� � r � B O ����c���Y��;��p$ � � �oi�/ Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�ne3 Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�meM Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�le3 Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �ke�_ Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�je� Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�ie� Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�he3 Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�ge�S Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��fe�I Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�ea�k Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�dgA Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�ce� Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��ba�% Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��a� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�`[e Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�_[�+ Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�^[�m Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�][� Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�\g1 Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�[i�[ Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��Zi�K Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Ye�% Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Xg�G Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�Wc�= Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u�a� Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� � a�[ Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l� a} Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z� a�W Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH� a5 Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B� [/ Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5 Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�% Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aq Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�aU Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a� Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5 Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[w Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv� g� Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��e�S Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�~c[ Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�}c5 Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�|a� Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��{a�Q Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�za{ Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�ya5 Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�x_E Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�w_�! Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�v[[ Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�u[� Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�t[; Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �si� Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�ri5 Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�qi] Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��pi�' Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l�.ey Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�-[q Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�,[y Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�+[W Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�*[�u Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�)g� Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�(g�e Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�'g�q Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�&aC Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��%a�% Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�$a� Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�#a= Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�"aW Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�!aU Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X� aU Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k� Y� Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a� [m Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn� g{ Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a� ga Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gU Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5 Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[ Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��+� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�gy Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e= Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�e�a Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�e Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�e3 Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�c� Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�ak Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�a5 Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�' Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�MaG Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Lg� Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Ka�q Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Jg? Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��I[�3 Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�H[G Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�G[5 Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��F[�W Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Ec? Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Dg�9 Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �Cg� Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�Bgi Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Ag� Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�@a5 Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��?�%� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�>s} Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�=aU Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��<[�/ Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�;[� Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�:[� Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��9[�M Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�8[� Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�7[W Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �6[�A Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�5gS Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��4g�' Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�3g� Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�2g5 Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�1eW Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �0e�W Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�/eW Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~�ia� Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ha� Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�ga�c Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��fa�' Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�ea�U Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�daM Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�ca� Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�bai Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��aa�? Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�`g� Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�_gs Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�^g� Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�]g�O Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�\g= Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �[g�7 Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�Zae Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Ya�] Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�Xm_ Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��Wm�9 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�Vm�3 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �Um�/ Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Tg� Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�SgO Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�Rg� Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�Qi� Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�PcY Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Oi�! Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Na� Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�gM Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_ Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�w Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gW Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J� g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�~g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�}gq Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�|g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�{g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�zgm Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��yg�% Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�xg�w Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�wg� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�vgk Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�ug�o Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��tg�! Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�sk3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�rgI Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �qg�7 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�pg� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�og�O Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�ne? Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�mgi Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�lc3 Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�kcq Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�je? Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � �#o�Q Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�"o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�!oi Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)�� o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser� uu Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN� o3 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b� o[ Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7� o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oU Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�og Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�o Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�os Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�ou Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�oW Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�oo Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�oy Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��o�# Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�S Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal�� o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`� oW Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z� oK Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� � o�O Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-� o�o Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�m Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�+ Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � �C{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�BwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Aw�c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�@w� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�?wq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��>w� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�=w} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��<}� Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�;s�e Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�:ws Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�9wi Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�8w� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�7wm Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�6wg Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�5so Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�4w[ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�3u3 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��2u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�1uw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�0uU Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�/u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�.u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�-u[ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��,u�1 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�+u�S Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�*o[ Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�)o�s Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�(o3 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�'o; Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�&oi Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�%o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�$oo Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) \ ��$ � 7 � � = � � C�@�.��� �\�]�� � \ Y�bGq Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�aM�w Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�`U� Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��_S�; Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�^S{ Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�]Oa Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�\S' Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�[S Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�ZGk Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�YG� Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�XGk Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��WG�A Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�VG3 Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �UO�o Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�T]�y Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �S� Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �Rq� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �Q}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�P}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��O}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�N}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��M{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�L{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�K{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �J{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��I{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��H{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�GwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�Fwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�E{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�D{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers # � ��] � � \ � � { � n � C�P���Cw��R��P��I � o�]� Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]' Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�]; Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�] Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]! Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=� M3 Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�eO Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�~ek Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�}Y7 Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�|Q�) Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�{[�I Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��zU�= Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�yQ�C Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�x]- Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�wQ= Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�vQ�{ Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�u[W Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��t[�S Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�sU_ Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�rK� Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�q]G Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�pS} Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�o]� Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��n]�Y Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�m]5 Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�lU5 Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �kS�K Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�jO�1 Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�iU] Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�hU5 Bill Nottingham <notting@redhat.com>7��@- initscript munging`�gUq Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�fG� Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�eUW Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �dG�w Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�cU9 Bill Nottingham <notting@redhat.com>7j4�- don't run by default " � k/� � � G � � � � N � P�m ��e��g �l�@�� � a�'yO Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�&m�Y Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�%y! Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�$m Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�#oC Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�"m�5 Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�!]5 Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H� QE Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd� ]q Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R� ]M Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t� ]� Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-� ]� Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]� Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�- Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y; Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�Q Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]' Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�]� Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�]5 Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]g Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�w Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�]A Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_ Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set�� ]�/ Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;� ] Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� � ]�a Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o� ]� Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"� M�{ Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]u Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�] Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�I Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18 7�k � 6 � q � � ��G��7��r j3�|��I F�Cm% Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�BE3 Tim Powers <timp@redhat.com>=@- automated rebuild9�AE3 Tim Powers <timp@redhat.com><��- automated rebuild�7�@m� Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�?e? Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�>m] Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�=m�} Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��<[�M Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�;mw Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�:EE Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�9E3 Tim Powers <timp@redhat.com><<0�- automated rebuildA�8m Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�7{# Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�6yC Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�5yM Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�4y�S Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��3y�' Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�2y! Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�1y�s Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�0m�e Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�/m�) Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�.m� Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�-e? Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�,y Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�+yU Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�*y+ Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�)y{ Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�(y� Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pages % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z�hcW Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�gcy Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�fco Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�ece Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�d_W Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�c_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�b_} Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�a_G Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�`_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�__} Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�^_= Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�]_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�\K Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�[_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�Z_� Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�Y_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�X_? Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�W_a Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�V]? Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�U]7 Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�T]� Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�S]5 Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�R]9 Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�Q]; Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�P]i Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�O]/ Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�N]/ Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�M_u Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�LE Tim Powers <timp@redhat.com>>.��- rebuilt\�K__ Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Jc� Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�I_� Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�H_g Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�G]e Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�FMU Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�E]S Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�D]�S Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i�s�c Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .�� Q�U Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� � Q�m Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]� Qo Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw� Q�! Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q� Q� Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�M Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�Qu Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5 Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�Q} Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQ Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�} Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_; Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�_C Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP� _G Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K Elliot Lee <sopwith@redhat.com>@��- rebuiltq�~_� Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�}_C Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�|_E Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�{_� Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�z__ Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��y_�1 Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�x]Y Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�wK Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�veI Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�uGm Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�t]+ Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�sK Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�r]7 Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�q]C Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�p]/ Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�o]k Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�n]+ Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�me/ Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�lcO Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�keq Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�jcE Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�ic# Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+� u�e Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$� s�Y Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy� s� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,� q�k Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a� qW Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qm Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qa Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�= Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�e� Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k� Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�y Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�s�k Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[ Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{� Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{W Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � �2o�S Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��1m�A Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�0m�o Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�/m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�.cA Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�-m� Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �,m�/ Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�+m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �*m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�)m�w Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�(m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �'m�+ Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��&m� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�%k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�$k�W Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�#k� Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�"s) Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�!k�i Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�Fm� Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Em? Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Dm�Y Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Cm� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Bm�! Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�Am�e Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�@m�{ Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �?m�) Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�>m_ Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�=k�] Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�<kS Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�;k�k Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�:qc Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�9k�q Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�8mW Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�7ok Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��6k�A Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�5kQ Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��4q� Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�3S Jesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �Zq�% Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Yq� Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Xq�u Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Wq�? Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�Vqc Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Us� Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Ts�) Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Ss� Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�RsO Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Qs� Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�PsG Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Os� Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Nm� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�Msk Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Lm� Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Km�9 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�JyA Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�IuY Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�H{ Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Gu�G Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��nc�- Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�mc Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�lc�% Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�kc�y Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�jc� Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�ic�C Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�hcc Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�gco Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�fc� Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��ec�C Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�dc�1 Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�cc� Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�bc� Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�ac} Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�`c�o Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�_qo Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�^q�U Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��]q� Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�\}�_ Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�[q�U Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�ee Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{ Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mU Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�a Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"� _�i Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cg Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�~_{ Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�}c�w Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�|c� Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��{_�1 Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�zc� Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�y_�K Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�x_E Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�w[�7 Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��v[�5 Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�u[� Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�t[�s Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�s[�E Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�rcM Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�qcy Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�pc� Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��oc�C Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) A �� � u � � p � 2��}#�$�h � k�>�A A �|� g� Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� � g�7 Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i� gq Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r� c� Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�c� Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�g�w Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�K Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g? Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�gU Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gA Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cm Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��g�M Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�cc Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQ Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9 Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�o Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�= Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&� g�i Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� � g�1 Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7� g� Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8� c� Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=� g� Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�+ Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�eu Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a� Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�eY Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC � �O�b � r � S �[ r�� >�R�Y � � e�9ek Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�8ic Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�7e�g Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�6c�? Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�5g� Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��4c�? Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�3gK Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�2c�Y Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�1g] Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�0g% Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�/g; Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�.cS Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��-c�G Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�,c�= Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�+c�u Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��*c�- Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�)c�u Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �(c�[ Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�'cu Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�&ce Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�%ce Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��$g�- Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��#g�G Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�"cE Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�!�1 Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG� g- Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0 x z�^ � F � ? � M M � z A�c�v9� �^��T � x i�Vgq Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�Uku Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Tk� Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Sg�c Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Ri[ Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�Qem Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�PeG Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Oi�M Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�Ne� Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�Me� Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Li� Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�Kie Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�Jiq Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�Ie} Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�He� Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Ge� Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�Fek Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�Eeq Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�De� Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Ce} Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Bi� Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Ae�W Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�@am Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�?]i Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�>aO Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�=aY Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �<a�[ Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�;]� Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��:e�# Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 file �S�� x � � � D =!=��X�3��I� ��pe�I Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�oa�k Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�ngA Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�me� Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��la�% Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��k� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�j[e Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�i[�+ Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�h[�m Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�g[� Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�fg1 Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�ei�[ Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��di�K Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��ce�% Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��bg�G Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�ac�= Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�`c Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �_a�7 Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�^ak Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�]ag Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��\�!� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �[e�7 Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�ZsA Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�YaG Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�XaQ Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�W[M Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 release z �V � ` � p � = � P ���f��H�?�| �� � � z X�aU Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y� a� Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH� a5 Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f� [w Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv� g� Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch�� e�S Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[ Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�c5 Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��a�Q Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{ Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5 Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_E Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�! Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X� [[ Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[� Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�~[; Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �}i� Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�|i5 Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�{i] Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��zi�' Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �yi�/ Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�xe3 Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�weM Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�ve3 Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �ue�_ Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�te� Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�se� Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�re3 Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�qe�S Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed " � � �J � � m � U � � � O�8�w���L�w�J��D�M � O�0aC Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��/a�% Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�.a� Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�-a= Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�,aW Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�+aU Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�*aU Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�)Y� Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�([m Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�'g{ Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�&ga Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�%gU Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�$g5 Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�#[�[ Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �"�+� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�!gy Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN� e= Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!� e�a Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo� e Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI� e3 Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~� c� Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�ak Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�a5 Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�' Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�a� Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[ Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a} Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�W Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5 Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�[/ Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5 Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�% Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aq Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configuration N R � � > � { � H � J�����5�#�8�V�?�: � N � �Mg� Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�Lgi Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Kg� Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Ja5 Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��I�%� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Hs} Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�GaU Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��F[�/ Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�E[� Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�D[� Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��C[�M Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�B[� Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�A[W Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �@[�A Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�?gS Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��>g�' Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�=g� Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�<g5 Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�;eW Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �:e�W Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�9eW Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�8ey Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�7[q Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�6[y Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�5[W Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�4[�u Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�3g� Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�2g�e Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�1g�q Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patch m .�B � � � � + � _ � z M�w� �����Z � m }�jg� Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�igs Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�hg� Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�gg�O Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�fg= Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �eg�7 Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�dae Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �ca�] Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�bm_ Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��am�9 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�`m�3 Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �_m�/ Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�^g� Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�]gO Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�\g� Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�[i� Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�ZcY Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Yi�! Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Xa� Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�WaG Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Vg� Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Ua�q Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Tg? Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��S[�3 Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�R[G Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�Q[5 Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��P[�W Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Oc? Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Ng�9 Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings � n �> a � � = � j � M� ��:��8� � ��g�% Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�w Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f� gk Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�o Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��~g�! Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�}k3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�|gI Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �{g�7 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�zg� Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�yg�O Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�xe? Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�wgi Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�vc3 Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�ucq Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�te? Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�sa� Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ra� Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�qa�c Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��pa�' Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�oa�U Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�naM Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�ma� Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�lai Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��ka�? Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version � �I��C � � J � 4 � � u��3�s�H�J�K�y� � t�"o Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�!o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n� os Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o� ou Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`� oW Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l� oo Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q� oy Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��o�# Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�S Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oW Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�oK Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�O Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�o�o Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�m Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�+ Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�gM Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!� g�_ Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m� g�w Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\� gW Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J� g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J� g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�gq Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�g3 Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gm Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827) ! q �-� � Z � \ � n � ] � r ���9�S�n�o�A�` � q m�Cwi Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Bw� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�Awm Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�@wg Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�?so Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�>w[ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�=u3 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��<u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�;uw Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�:uU Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�9u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�8u� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�7u[ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��6u�1 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�5u�S Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�4o[ Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�3o�s Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�2o3 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�1o; Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�0oi Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�/o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�.oo Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �-o�Q Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�,o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�+oi Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��*o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�)uu Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�(o3 Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�'o[ Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�&o� Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�%oU Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�$og Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�#oa Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646) ` ��U � V � e � Y � ` c�� y�uk� � �� � ` � �_{�#!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��^� �i Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �]� Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �\q� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �[}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�Z}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��Y}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�X}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��W{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�V{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�U{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �T{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��S{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��R{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�QwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�Pwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�O{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�N{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �M{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�LwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Kw�c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Jw� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�Iwq Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Hw� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Gw} Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��F}� Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Es�e Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�Dws Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572) A � � � $ � ! � � a�W����p�� �P � A o�y}g#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��x}�9#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�w}�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��v{�7#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�u{c#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y�t�["Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�ss� "Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �rs�#"Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��qs�"Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �p}�!"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�o}g"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��n}�9"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�m}�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��l{�7"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�k{c"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�j{k"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7�i�'�I!Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �hs�#!Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��gs�!Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �f}�!!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�e}g!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��d}�9!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�c}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��b{�7!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�a{c!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�`{k!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake v o�] � p � � ���5N(�� v � �s�#%Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�%Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }g%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�"� � �'$Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S$Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� $Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[$Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� $Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#$Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�$Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>� }�$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"��)� #Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�~�[#Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�}s� #Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �|s�##Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��{s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �z}�!#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � �9 R , z w�e�x���.� � � �#s�#'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��"s�'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �!}�!'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-� ��E&Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.� ��C&Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"� � �'&Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S&Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"� �)� &Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[&Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� &Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.���C%Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'%Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�S%Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� %Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[%Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� %Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers �9 R , z � ��;T.|� �1�5�'�=(Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�4��E(Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�3��C(Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�2� �'(Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�1�)�S(Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�0�)� (Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�/�[(Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�.s� (Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �-s�#(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��,s�(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�1�+�'�='Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�*��E'Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�)��C'Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�(� �''Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�'�)�S'Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�&�)� 'Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�%�['Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�$s� 'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers " Y �. � P � q � G � K � Ie �!�f�e����w�L � Y ��W[�S)Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�VU_)Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�UK�)Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�T]G)Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�SS})Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�R]�)Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��Q]�Y)Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�P]5)Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�OU5)Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �NS�K)Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�MO�1)Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�LU])Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�KU5)Bill Nottingham <notting@redhat.com>7��@- initscript munging`�JUq)Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�IG�)Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�HUW)Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �GG�w)Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�FU9)Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�EGq)Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�DM�w)Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�CU�)Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��BS�;)Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�AS{)Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�@Oa)Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�?S')Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�>S)Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�=Gk)Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�<G�)Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�;Gk)Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��:G�A)Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�9G3)Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �8O�o)Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�7]�y)Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!�6�'� (Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update $ � �8 � ' � � J � @ � � ;����M�5�V�p!u���> � � a�{]k)Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�zY;)Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��y]�Q)Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�x]')Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�w]�)Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�v]5)Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�u] )Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�t]g)Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�s]�w)Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�r]A)Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�q]_)Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��p]�/)Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�o] )Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �n]�a)Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�m]�)Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�lM�{)Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�k]u)Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�j])Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��i]�I)Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�h]�)Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�g]')Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�f];)Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�e])Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�d]!)Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�cM3)Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�beO)Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�aek)Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�`Y7)Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�_Q�))Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�^[�I)Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��]U�=)Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�\Q�C)Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�[]-)Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�ZQ=)Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�YQ�{)Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�X[W)Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820) � ��\ � � ^ � � c � 7 � � ��Z�%�[ck � � � `�yM)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�y�S)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��y�')Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�y!)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�y�s)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�m�e)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�m�))Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�m�)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�e?)Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�y)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�yU)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O� y+)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w� y{)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E� y�)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa� yO)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!� m�Y)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�y!)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5)Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�]5)Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QE)Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�]q)Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]M)Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t� ]�)Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�]�)Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�~]�)Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�}]�-)Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�|]i)Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489) # Y �S�� � O � � � � e �j�UU��O��Y��_�V � Y L�;_?)Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�:_a)Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�9]?)Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�8]7)Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�7]� )Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�6]5)Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�5]9)Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�4];)Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�3]i)Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�2]/)Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�1]/)Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�0_u)Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�/E )Tim Powers <timp@redhat.com>>.��- rebuilt\�.__)Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�-c�)Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�,_� )Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�+_g)Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�*]e)Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�)MU)Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�(]S)Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�']�S)Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�&m%)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�%E3)Tim Powers <timp@redhat.com>=@- automated rebuild9�$E3)Tim Powers <timp@redhat.com><��- automated rebuild�7�#m�)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�"e?)Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�!m])Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3� m�})Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.�� [�M)Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso� mw)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B� EE)Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9� E3)Tim Powers <timp@redhat.com><<0�- automated rebuildA�m)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�{#)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�yC)Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574) , � ���y* � n � _ � R � { � � �y5��;��x ��7�N��8��<�� � � N�gQQ)Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�fQ�})Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�e_;)Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�d_C)Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�c_G)Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�bK )Elliot Lee <sopwith@redhat.com>@��- rebuiltq�a_�)Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�`_C)Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�__E)Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�^_�)Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�]__)Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��\_�1)Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�[]Y)Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�ZK )Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�YeI)Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�XGm)Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�W]+)Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�VK )Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�U]7)Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�T]C)Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�S]/)Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�R]k)Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�Q]+)Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�Pe/)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�OcO)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�Neq)Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�McE)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Lc#)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�KcW)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�Jcy)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�Ico)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�Hce)Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�G_W)Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�F_=)Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�E_})Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�D_G)Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�C_=)Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�B_})Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�A_=)Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�@_?)Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�?K )Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�>_?)Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�=_�)Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�<_?)Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHEL � �� � l � � q � � ����-�"�� ��{k�=)Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�ze�)Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�yk�)Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�xk�1)Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�wk�y)Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�vs�k)Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�us� )Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�t{�[)Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�s{�)Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�r{W)Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�qs�c)Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��pQ�U)Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �oQ�m)Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�nQo)Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�mQ�!)Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�lQ�)Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�kQ�M)Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�jQu)Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��iQ�5)Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�hQ})Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slaves n K � s _ � � ���xp�b n �p� m�w)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}� m�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� � m�+)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option�� m� )Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�k�W)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� )Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s))Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�k�i)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�e)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�s�Y)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,� q�k)Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qW)Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�~qm)Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�}qa)Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�|q�u)Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � | � 4 � 0 � � � 6�@�q�Wj �� � �r�#m�{)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �"m�))Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�!m_)Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"� k�])Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\� kS)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i� k�k)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg� qc)Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,� k�q)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�mW)Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�ok)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��k�A)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�kQ)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��q�)Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�S )Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �o�S)Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��m�A)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�m�o)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�m�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�cA)Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�m� )Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �m�/)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�m�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� � m�)Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. } U � � � Q ���B���"�< } �;�4s�)Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�3sG)Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��2s�)Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��1m�)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�0sk)Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�/m�)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��.m�9)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�-yA)Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�,uY)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�+{ )Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�*u�G)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�)m�)Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�(m?)Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�'m�Y)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�&m�)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��%m�!)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�$m�e)Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition \ � � � � M ��!| a�}�0�( � \ `�Kcc)Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�Jco)Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�Ic�)Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Hc�C)Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Gc�1)Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Fc� )Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Ec�)Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Dc})Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Cc�o)Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�Bqo)Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Aq�U)Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��@q� )Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�?}�_)Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�>q�U)Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �=q�%)Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��<q� )Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�;q�u)Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��:q�?)Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�9qc)Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�8s� )Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �7s�))Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�6s� )Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�5sO)Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage K +3 = � B -��3a�;1���I � K q�_c�)Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��^_�1)Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�]c�)Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�\_�K)Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�[_E)Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�Z[�7)Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��Y[�5)Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�X[�)Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�W[�s)Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�V[�E)Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�UcM)Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�Tcy)Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Sc�)Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��Rc�C)Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��Qc�-)Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�Pc)Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Oc�%)Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�Nc�y)Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�Mc� )Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Lc�C)Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0) J �d � Y � U � @ � , ����>�r�5�c d � � J [�zgU)Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�ygA)Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�xcm)Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��wg�M)Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�vcc)Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�ucQ)Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�tc� )Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��sg�9)Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�rc�o)Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��qg�=)Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�pg�i)Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �og�1)Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�ng� )Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�mc�)Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�lg�)Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�kc�+)Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�jeu)Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�ia�)Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�heY)Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�gee)Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�fa�{)Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�emU)Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �da�a)Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�c_�i)Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�bcg)Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�a_{)Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�`c�w)Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful) U �a � 4 � 7 7 � � 2 � �E�8� �@�N � � U _�g])Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�g%)Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�g;)Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�cS)Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��c�G)Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�c�=)Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�c�u)Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in�� c�-)Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*� c�u)Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� � c�[)Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i� cu)Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a� ce)Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ce)Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�-)Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G)Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cE)Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d��1)Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g-)Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�g�)Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �g�7)Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i� gq)Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�c�)Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�~c� )Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�}g�w)Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��|g�K)Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�{g?)Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS � �4 � � ; � m � k � n �L�+��O�q�=�i� � �9�0e�)Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��/i� )Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�.ie)Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�-iq)Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�,e})Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�+e� )Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�*e�)Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�)ek)Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�(eq)Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�'e�)Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�&e})Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�%i�)Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �$e�W)Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�#am)Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�"]i)Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�!aO)Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ� aY)Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� � a�[)Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y� ]�)Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces�� e�#)Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee� ek)Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�ic)Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�e�g)Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�c�?)Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�g�)Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��c�?)Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�gK)Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�c�Y)Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch � ���% � � � ? � � > � T�S�_� �|`|0= � �"�K[�m)Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�J[�)Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�Ig1)Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�Hi�[)Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��Gi�K)Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Fe�%)Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Eg�G)Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�Dc�=)Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�Cc)Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �Ba�7)Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�Aak)Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�@ag)Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��?�!�)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �>e�7)Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�=sA)Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�<aG)Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�;aQ)Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�:[M)Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�9gq)Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�8ku)Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�7k�)Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�6g�c)Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�5i[)Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�4em)Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�3eG)Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��2i�M)Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�1e�)Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD x ;�? � E � I � R � l �{�c ��bq�C�� � x t�ia� )Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��ha�Q)Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�ga{)Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�fa5)Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�e_E)Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�d_�!)Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�c[[)Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�b[�)Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�a[;)Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �`i�)Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�_i5)Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�^i])Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��]i�')Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �\i�/)Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�[e3)Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�ZeM)Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Ye3)Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �Xe�_)Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�We� )Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�Ve�)Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�Ue3)Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�Te�S)Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��Se�I)Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�Ra�k)Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�QgA)Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�Pe�)Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��Oa�%)Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��N� �)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�M[e)Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�L[�+)Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �U7 � U � I � J � � l� 4�M���)��\ � � a� ga)Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gU)Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5)Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[)Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��+�)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�gy)Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e=)Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�e�a)Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�e)Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI� e3)Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�c� )Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�~ak)Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�}a5)Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��|e�')Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�{a� )Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �za�[)Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�ya})Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�xa�W)Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�wa5)Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�v[/)Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�ug5)Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��te�%)Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�se� )Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�raq)Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�qaU)Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�pa�)Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�oa5)Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�n[w)Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�mg� )Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��le�S)Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�kc[)Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�jc5)Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2 K �+�b � \ � e e ��Q��(�[�]���H�6 � K y�([�)Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�'[�)Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��&[�M)Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�%[�)Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�$[W)Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �#[�A)Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�"gS)Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��!g�')Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu� g�)Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K� g5)Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[� eW)Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� � e�W)Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[� eW)Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�ey)Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�[q)Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�[y)Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�[W)Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�[�u)Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�g�)Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�g�e)Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�g�q)Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�aC)Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��a�%)Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�a�)Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�a=)Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�aW)Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�aU)Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X� aU)Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k� Y�)Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a� [m)Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn� g{)Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver) � y � � � D � X � 6��A�u��c��+ � c�Em_)Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��Dm�9)Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�Cm�3)Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �Bm�/)Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Ag� )Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�@gO)Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�?g�)Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�>i�)Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�=cY)Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��<i�!)Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�;a� )Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�:aG)Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�9g�)Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�8a�q)Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�7g?)Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��6[�3)Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�5[G)Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�4[5)Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��3[�W)Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�2c?)Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�1g�9)Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �0g� )Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�/gi)Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�.g� )Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�-a5)Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��,�%�)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�+s})Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�*aU)Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��)[�/)Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch merged � _�k < � S � A � h 4���=�� ��ve � L�`k3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�_gI)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �^g�7)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�]g� )Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�\g�O)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�[e?)Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�Zgi)Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Yc3)Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�Xcq)Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�We?)Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�Va� )Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�Ua�)Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�Ta�c)Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��Sa�')Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�Ra�U)Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�QaM)Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�Pa�)Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�Oai)Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��Na�?)Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�Mg�)Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�Lgs)Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�Kg�)Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�Jg�O)Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�Ig=)Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �Hg�7)Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�Gae)Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Fa�])Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20 u �M � . � < � � 6 � � O����h+z�|� � u v�|o�)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �{o�S)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��zo� )Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�yoW)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�xoK)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �wo�O)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�vo�o)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�uo�m)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�tg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�sg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�rg�+)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�qgM)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�pg�_)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�og�w)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�ngW)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�mg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�lg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�kg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�jgq)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�ig3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�hg3)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�ggm)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��fg�%)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�eg�w)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�dg� )Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�cgk)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�bg�o)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��ag�!)Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066) � {�| � 8 � J � k � � ~ -�/�A�0�E����� �& � }� u� )Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�u�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�u[)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��u�1)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�u�S)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�o[)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�o�s)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�o3)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�o;)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�oi)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�o� )Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�oo)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �o�Q)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�o�)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�oi)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)�� o� )Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser� uu)Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN� o3)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b� o[)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7� o�)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oU)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�og)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�o)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�o� )Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�os)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�ou)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�oW)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l� oo)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�oy)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��~o�#)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��}o�)Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315) G �%�H � n � � � ) { � y��T�g��%��� G �>�;}�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��:{�7)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�9{c)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�8{k)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �7{�#)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��6{�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��5{�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�4wU)Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�3wu)Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�2{�{)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�1{W)Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �0{�!)Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�/wC)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�.w�c)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�-w�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�,wq)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��+w�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�*w})Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��)}�)Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�(s�e)Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�'ws)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�&wi)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�%w�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�$wm)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�#wg)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�"so)Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�!w[)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q� u3)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471�� u�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s� uw)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b� uU)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661) " � c�` � N � � = � | # � } %�5��|5�>�v1��@�Z � � e�]S}*Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�\]�*Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��[]�Y*Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�Z]5*Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�YU5*Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �XS�K*Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�WO�1*Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�VU]*Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�UU5*Bill Nottingham <notting@redhat.com>7��@- initscript munging`�TUq*Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�SG�*Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�RUW*Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �QG�w*Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�PU9*Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�OGq*Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�NM�w*Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�MU�*Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��LS�;*Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�KS{*Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�JOa*Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�IS'*Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�HS*Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�GGk*Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�FG�*Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�EGk*Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��DG�A*Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�CG3*Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �BO�o*Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�A]�y*Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �@�)Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �?q�)Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �>}�!)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�=}g)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��<}�9)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) $ c �=�J � � � = q � � L��J ��C�< �����k�] � c p�]�*Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF� ]5*Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] *Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�~]g*Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�}]�w*Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�|]A*Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�{]_*Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��z]�/*Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�y] *Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �x]�a*Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�w]�*Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�vM�{*Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�u]u*Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�t]*Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��s]�I*Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�r]�*Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�q]'*Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�p];*Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�o]*Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�n]!*Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�mM3*Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�leO*Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�kek*Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�jY7*Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�iQ�)*Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�h[�I*Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��gU�=*Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�fQ�C*Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�e]-*Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�dQ=*Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�cQ�{*Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�b[W*Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��a[�S*Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�`U_*Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�_K�*Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�^]G*Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021) � �%�w M � " * � n # � �j xK��J��� � � J� y!*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t� y�s*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'� m�e*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I� m�)*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�m�*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�e?*Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�y*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�yU*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�y+*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�y{*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�y�*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�yO*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�m�Y*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�y!*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5*Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�]5*Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H� QE*Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd� ]q*Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R� ]M*Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t� ]�*Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-� ]�*Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]�*Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�-*Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i*Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k*Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;*Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�Q*Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]'*Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 final ! y n�c � r 6 � � � M � @ �%�|��C��H�Y � y F�@]5*Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�?]9*Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�>];*Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�=]i*Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�<]/*Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�;]/*Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�:_u*Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�9E *Tim Powers <timp@redhat.com>>.��- rebuilt\�8__*Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�7c�*Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�6_� *Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�5_g*Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�4]e*Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�3MU*Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�2]S*Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�1]�S*Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�0m%*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�/E3*Tim Powers <timp@redhat.com>=@- automated rebuild9�.E3*Tim Powers <timp@redhat.com><��- automated rebuild�7�-m�*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�,e?*Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�+m]*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�*m�}*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��)[�M*Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�(mw*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�'EE*Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�&E3*Tim Powers <timp@redhat.com><<0�- automated rebuildA�%m*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�${#*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�#yC*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�"yM*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�!y�S*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.�� y�'*Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257) - �@��C � @ � � m � c � T � � ,�a �_�x�~4��a �z�� �{ � P�m_G*Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�lK *Elliot Lee <sopwith@redhat.com>@��- rebuiltq�k_�*Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�j_C*Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�i_E*Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�h_�*Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�g__*Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��f_�1*Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�e]Y*Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�dK *Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�ceI*Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�bGm*Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�a]+*Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�`K *Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�_]7*Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�^]C*Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�]]/*Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�\]k*Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�[]+*Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�Ze/*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�YcO*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�Xeq*Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�WcE*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Vc#*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�UcW*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�Tcy*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�Sco*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�Rce*Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�Q_W*Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�P_=*Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�O_}*Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�N_G*Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�M_=*Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�L_}*Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�K_=*Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�J_?*Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�IK *Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�H_?*Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�G_�*Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�F_?*Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�E_?*Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�D_a*Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�C]?*Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�B]7*Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�A]� *Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threads �b�h | H � Z � � DW�'z�I�E� x�e�*Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k�*Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1*Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�y*Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-� s�k*Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� *Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�~{�[*Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�}{�*Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�|{W*Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�{s�c*Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��zQ�U*Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �yQ�m*Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�xQo*Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�wQ�!*Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�vQ�*Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�uQ�M*Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�tQu*Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��sQ�5*Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�rQ}*Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�qQQ*Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�pQ�}*Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�o_;*Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�n_C*Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps L � 5 � ] � I � �� ���bZ � L }�m�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �m�+*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��m� *Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�k�W*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� *Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s)*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�k�i*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+� u�e*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$� s�Y*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy� s�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,� q�k*Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a� qW*Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qm*Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qa*Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u*Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�=*Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � @ � , < � �B�L�}�cv�� � � �,m�)*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�+m_*Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�*k�]*Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�)kS*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�(k�k*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�'qc*Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�&k�q*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�%mW*Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�$ok*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��#k�A*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�"kQ*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��!q�*Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6� S *Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� � o�S*Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo�� m�A*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l� m�o*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>� m�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�cA*Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�m� *Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �m�/*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�m�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �m�*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�m�w*Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled F _ � � � [ � �L�� �, � F Z�=sG*Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��<s�*Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��;m�*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�:sk*Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�9m�*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��8m�9*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�7yA*Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�6uY*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�5{ *Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�4u�G*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�3m�*Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�2m?*Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�1m�Y*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�0m�*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��/m�!*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�.m�e*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�-m�{*Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc i A�a � Q � M � \�b�M�2�=q � i p�Sc�*Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Rc�C*Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Qc�1*Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Pc� *Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Oc�*Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Nc}*Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Mc�o*Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�Lqo*Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Kq�U*Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��Jq� *Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�I}�_*Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Hq�U*Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �Gq�%*Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Fq� *Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Eq�u*Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Dq�?*Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�Cqc*Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Bs� *Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �As�)*Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�@s� *Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�?sO*Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�>s�*Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context } �4_ g 7 q v a-�g��oe� � } q�gc�*Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�f_�K*Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�e_E*Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�d[�7*Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��c[�5*Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�b[�*Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�a[�s*Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�`[�E*Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�_cM*Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�^cy*Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�]c�*Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��\c�C*Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��[c�-*Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�Zc*Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Yc�%*Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�Xc�y*Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�Wc� *Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Vc�C*Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�Ucc*Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�Tco*Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995) f v � f [ � W � B � .����@�t�7�e f ��g�M*Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`� cc*Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQ*Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�~c� *Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��}g�9*Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�|c�o*Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��{g�=*Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�zg�i*Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �yg�1*Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�xg� *Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�wc�*Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�vg�*Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�uc�+*Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�teu*Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�sa�*Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�reY*Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�qee*Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�pa�{*Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�omU*Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �na�a*Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�m_�i*Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�lcg*Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�k_{*Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�jc�w*Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�ic�*Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��h_�1*Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856) � �D�� � G � � � l ��+� p�x& � ��c�G*Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�c�=*Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�c�u*Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��c�-*Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�c�u*Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �c�[*Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�cu*Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�ce*Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ce*Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�-*Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G*Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cE*Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d��1*Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG� g-*Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|� g�*Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� � g�7*Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i� gq*Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r� c�*Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�c� *Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�g�w*Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�K*Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g?*Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�gU*Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gA*Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cm*Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191) � �T� � s � b � � � � w�_�X�ff�� Z�| � ��9i� *Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�8ie*Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�7iq*Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�6e}*Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�5e� *Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�4e�*Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�3ek*Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�2eq*Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�1e�*Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�0e}*Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�/i�*Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �.e�W*Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�-am*Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�,]i*Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�+aO*Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�*aY*Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �)a�[*Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�(]�*Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��'e�#*Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�&ek*Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�%ic*Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�$e�g*Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�#c�?*Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�"g�*Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��!c�?*Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V� gK*Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\� c�Y*Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_� g]*Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C� g%*Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN� g;*Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�cS*Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159) � �D � Q � � _ � n � U �z�"��F?#? � I�Sg1*Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�Ri�[*Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��Qi�K*Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Pe�%*Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Og�G*Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�Nc�=*Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�Mc*Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �La�7*Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�Kak*Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�Jag*Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��I�!�*Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �He�7*Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�GsA*Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�FaG*Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�EaQ*Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�D[M*Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�Cgq*Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�Bku*Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Ak�*Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�@g�c*Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�?i[*Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�>em*Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�=eG*Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��<i�M*Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�;e�*Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�:e�*Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet _ g � B � ! � X � �m�w��.�T�g��} � � _ H�pa5*Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�o_E*Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�n_�!*Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�m[[*Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�l[�*Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�k[;*Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �ji�*Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�ii5*Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�hi]*Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��gi�'*Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �fi�/*Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�ee3*Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�deM*Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�ce3*Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �be�_*Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�ae� *Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�`e�*Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�_e3*Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�^e�S*Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��]e�I*Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�\a�k*Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�[gA*Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�Ze�*Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��Ya�%*Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��X� �*Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�W[e*Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�V[�+*Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�U[�m*Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�T[�*Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms ���4 � � > � � � 2 � Q�|7������N��j� � ��+�*Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�gy*Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN� e=*Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!� e�a*Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo� e*Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI� e3*Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~� c� *Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�ak*Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�a5*Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�'*Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�a� *Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[*Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a}*Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�W*Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5*Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B� [/*Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5*Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��~e�%*Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�}e� *Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�|aq*Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�{aU*Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�za�*Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�ya5*Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�x[w*Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�wg� *Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��ve�S*Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�uc[*Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�tc5*Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�sa� *Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��ra�Q*Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�qa{*Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDB [ #�w � > � u � o � x & x�d �;�n�p"�!� � [ V�.[W*Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �-[�A*Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�,gS*Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��+g�'*Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�*g�*Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�)g5*Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�(eW*Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �'e�W*Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�&eW*Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�%ey*Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�$[q*Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�#[y*Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�"[W*Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�![�u*Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>� g�*Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$� g�e*Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*� g�q*Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO� aC*Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741�� a�%*Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�a�*Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�a=*Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�aW*Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�aU*Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�aU*Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�Y�*Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�[m*Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�g{*Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�ga*Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gU*Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5*Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[*Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings �� | ! � � � G�[�9��D�x�� f � � �Lm�/*Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Kg� *Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�JgO*Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�Ig�*Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�Hi�*Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�GcY*Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Fi�!*Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Ea� *Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�DaG*Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Cg�*Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Ba�q*Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Ag?*Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��@[�3*Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�?[G*Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�>[5*Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��=[�W*Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�<c?*Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�;g�9*Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �:g� *Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�9gi*Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�8g� *Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�7a5*Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��6�%�*Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�5s}*Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�4aU*Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��3[�/*Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�2[�*Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�1[�*Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��0[�M*Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�/[�*Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0) � . � � � � s �����a}�B��;�� � �Y�fg�O*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�ee?*Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�dgi*Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�cc3*Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�bcq*Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�ae?*Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�`a� *Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�_a�*Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�^a�c*Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��]a�'*Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�\a�U*Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�[aM*Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�Za�*Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�Yai*Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��Xa�?*Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�Wg�*Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�Vgs*Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�Ug�*Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�Tg�O*Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�Sg=*Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �Rg�7*Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�Qae*Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Pa�]*Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�Om_*Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��Nm�9*Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�Mm�3*Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) I �t � � � � � s �o�i �L�M�5��G � I Z�oK*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�O*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-� o�o*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�m*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�~g3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�}g3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�|g�+*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�{gM*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�zg�_*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�yg�w*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�xgW*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�wg3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�vg3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�ug3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�tgq*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�sg3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�rg3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�qgm*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��pg�%*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�og�w*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�ng� *Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�mgk*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�lg�o*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��kg�!*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�jk3*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�igI*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �hg�7*Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�gg� *Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �r � t � u � 1 � C � d���w&�(�:�)�>���� � �b�"u�S*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�!o[*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/� o�s*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN� o3*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R� o;*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi� oi*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|� o� *Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�oo*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �o�Q*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�o�*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�oi*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��o� *Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�uu*Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�o3*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�o[*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�o�*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oU*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�og*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�o*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�o� *Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n� os*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o� ou*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`� oW*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l� oo*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q� oy*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��o�#*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��o�*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o�*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�S*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� *Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oW*Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) � k� � * � M � s � � .��~��Y�l�*� � � �A{�#*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��@{�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��?{�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�>wU*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�=wu*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�<{�{*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�;{W*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �:{�!*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�9wC*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�8w�c*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�7w�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�6wq*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��5w�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�4w}*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��3}�*Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�2s�e*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�1ws*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�0wi*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�/w�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�.wm*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�-wg*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�,so*Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�+w[*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�*u3*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��)u�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�(uw*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�'uU*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�&u� *Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�%u�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�$u[*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��#u�1*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package � � � � $ � ! � b � ���=�{>��}�=�U��7�� � �>�aO�1+Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�`U]+Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�_U5+Bill Nottingham <notting@redhat.com>7��@- initscript munging`�^Uq+Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�]G�+Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�\UW+Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �[G�w+Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�ZU9+Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�YGq+Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�XM�w+Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�WU�+Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��VS�;+Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�US{+Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�TOa+Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�SS'+Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�RS+Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�QGk+Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�PG�+Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�OGk+Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��NG�A+Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�MG3+Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �LO�o+Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�K]�y+Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �J�*Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �Iq�*Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �H}�!*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�G}g*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��F}�9*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�E}�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��D{�7*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�C{c*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�B{k*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # � o*�D � l � O � ] 5 � ��R~ �P��w=��=�l]�J � ��]�/+Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] +Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�a+Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�]�+Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"� M�{+Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]u+Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�~]+Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��}]�I+Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�|]�+Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�{]'+Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�z];+Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�y]+Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�x]!+Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�wM3+Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�veO+Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�uek+Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�tY7+Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�sQ�)+Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�r[�I+Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��qU�=+Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�pQ�C+Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�o]-+Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�nQ=+Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�mQ�{+Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�l[W+Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��k[�S+Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�jU_+Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�iK�+Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�h]G+Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�gS}+Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�f]�+Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��e]�Y+Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�d]5+Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�cU5+Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �bS�K+Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. ! �S�E � K p & � _ � mu �n%R��h�_� �c�� u�%m�+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�$e?+Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�#y+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�"yU+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�!y++Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w� y{+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E� y�+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa� yO+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!� m�Y+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J� y!+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�]5+Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QE+Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�]q+Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]M+Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�]�+Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�]�+Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]�+Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�-+Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i+Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k+Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;+Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf�� ]�Q+Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?� ]'+Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp� ]�+Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF� ]5+Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;� ] +Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]g+Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�w+Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�]A+Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_+Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set { � � 1 � & � y 5 � � B�u���B��?�{ { �|�@_� +Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�?_g+Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�>]e+Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�=MU+Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�<]S+Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�;]�S+Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�:m%+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�9E3+Tim Powers <timp@redhat.com>=@- automated rebuild9�8E3+Tim Powers <timp@redhat.com><��- automated rebuild�7�7m�+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�6e?+Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�5m]+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�4m�}+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��3[�M+Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�2mw+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�1EE+Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�0E3+Tim Powers <timp@redhat.com><<0�- automated rebuildA�/m+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�.{#+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�-yC+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�,yM+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�+y�S+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��*y�'+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�)y!+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�(y�s+Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�'m�e+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�&m�)+Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) . � �,��J � U � K � S � � } .�r$�c�V�"�� �}9��?��|" � � 2�nK +Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�meI+Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�lGm+Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�k]++Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�jK +Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�i]7+Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�h]C+Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�g]/+Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�f]k+Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�e]++Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�de/+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�ccO+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�beq+Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�acE+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�`c#+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�_cW+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�^cy+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�]co+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�\ce+Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�[_W+Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�Z_=+Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�Y_}+Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�X_G+Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�W_=+Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�V_}+Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�U_=+Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�T_?+Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�SK +Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�R_?+Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�Q_�+Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�P_?+Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�O_?+Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�N_a+Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�M]?+Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�L]7+Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�K]� +Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�J]5+Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�I]9+Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�H];+Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�G]i+Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�F]/+Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�E]/+Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�D_u+Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�CE +Tim Powers <timp@redhat.com>>.��- rebuilt\�B__+Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Ac�+Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � ��I � � 2 � � Y c � & ��~�����$� � �-� s�k+Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}� s� +Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[+Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{�+Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{W+Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�s�c+Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�U+Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�m+Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�Qo+Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�Q�!+Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q� Q�+Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�M+Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�~Qu+Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��}Q�5+Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�|Q}+Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�{QQ+Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�zQ�}+Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�y_;+Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�x_C+Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�w_G+Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�vK +Elliot Lee <sopwith@redhat.com>@��- rebuiltq�u_�+Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�t_C+Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�s_E+Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�r_�+Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�q__+Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��p_�1+Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�o]Y+Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context � L � A � � � � #��k���� � �_�k�W+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� +Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s)+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�k�i+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�e+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�s�Y+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�q�k+Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qW+Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qm+Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qa+Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u+Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�=+Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�e�+Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7� k�+Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L� k�1+Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0� k�y+Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � ~ � p | � } m�^��p7�T�O�=� g�1qc+Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�0k�q+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�/mW+Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�.ok+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��-k�A+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�,kQ+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��+q�+Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�*S +Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �)o�S+Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��(m�A+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�'m�o+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�&m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�%cA+Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�$m� +Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �#m�/+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�"m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �!m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p� m�w+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}� m�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� � m�++Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option�� m� +Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw� k�+Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) � � � ( � ��qqL�{�N � � Z�AyA+Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�@uY+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�?{ +Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�>u�G+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�=m�+Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�<m?+Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�;m�Y+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�:m�+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��9m�!+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�8m�e+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�7m�{+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �6m�)+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�5m_+Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�4k�]+Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�3kS+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�2k�k+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � 1 � = � W � 7 � (�>�o�X�C � ��Tq� +Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�S}�_+Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Rq�U+Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �Qq�%+Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Pq� +Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Oq�u+Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Nq�?+Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�Mqc+Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Ls� +Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Ks�)+Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Js� +Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�IsO+Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Hs�+Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�GsG+Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Fs�+Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Em�+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�Dsk+Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Cm�+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Bm�9+Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � [�@ � \ � z � ; fn>x}h4�n� � �%�k[�s+Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�j[�E+Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�icM+Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�hcy+Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�gc�+Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��fc�C+Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��ec�-+Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�dc+Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�cc�%+Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�bc�y+Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�ac� +Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�`c�C+Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�_cc+Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�^co+Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�]c�+Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��\c�C+Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�[c�1+Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Zc� +Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Yc�+Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Xc}+Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Wc�o+Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�Vqo+Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Uq�U+Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. � � y . � � �d���I�8�t�R�H � �8�c�+Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=� g�+Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�++Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�~eu+Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�}a�+Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�|eY+Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�{ee+Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�za�{+Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�ymU+Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �xa�a+Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�w_�i+Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�vcg+Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�u_{+Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�tc�w+Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�sc�+Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��r_�1+Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�qc�+Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�p_�K+Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�o_E+Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�n[�7+Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��m[�5+Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�l[�+Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist � E� y � < � j k � Q�c�����>���^��* � � � c�[+Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i� cu+Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a� ce+Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a� ce+Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�-+Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G+Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cE+Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d��1+Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g-+Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�g�+Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �g�7+Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�gq+Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�c�+Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�c� +Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�g�w+Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�K+Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g?+Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�gU+Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ� gA+Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte� cm+Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)�� g�M+Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`� cc+Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W� cQ+Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� +Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9+Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�o+Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�=+Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�i+Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �g�1+Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� +Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) H R� Z q � =�Q� X�����3�i � H ~�9i�+Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �8e�W+Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�7am+Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�6]i+Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�5aO+Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�4aY+Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �3a�[+Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�2]�+Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��1e�#+Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�0ek+Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�/ic+Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�.e�g+Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�-c�?+Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�,g�+Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��+c�?+Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�*gK+Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�)c�Y+Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�(g]+Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�'g%+Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�&g;+Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�%cS+Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��$c�G+Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�#c�=+Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�"c�u+Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��!c�-+Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*� c�u+Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 i ��$ � F � � > � {�_ �>�&�f �_�2�h � i n�Wc+Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �Va�7+Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�Uak+Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�Tag+Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��S�!�+Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �Re�7+Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�QsA+Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�PaG+Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�OaQ+Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�N[M+Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�Mgq+Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�Lku+Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Kk�+Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Jg�c+Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Ii[+Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�Hem+Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�GeG+Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Fi�M+Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�Ee�+Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�De�+Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Ci� +Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�Bie+Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�Aiq+Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�@e}+Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�?e� +Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�>e�+Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�=ek+Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�<eq+Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�;e�+Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�:e}+Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter) � .� � r � B O ����c���Y��;��p$ � � �pi�/+Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�oe3+Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�neM+Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�me3+Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �le�_+Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�ke� +Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�je�+Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�ie3+Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�he�S+Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��ge�I+Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�fa�k+Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�egA+Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�de�+Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��ca�%+Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��b� �+Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�a[e+Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�`[�++Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�_[�m+Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�^[�+Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�]g1+Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�\i�[+Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��[i�K+Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Ze�%+Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Yg�G+Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�Xc�=+Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u�a� +Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[+Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l� a}+Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z� a�W+Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH� a5+Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B� [/+Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K� g5+Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�%+Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� +Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aq+Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�aU+Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a�+Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5+Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[w+Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�g� +Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch�� e�S+Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[+Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�~c5+Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�}a� +Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��|a�Q+Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�{a{+Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�za5+Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�y_E+Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�x_�!+Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�w[[+Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�v[�+Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�u[;+Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �ti�+Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�si5+Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�ri]+Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��qi�'+Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l�/ey+Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�.[q+Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�-[y+Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�,[W+Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�+[�u+Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�*g�+Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�)g�e+Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�(g�q+Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�'aC+Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��&a�%+Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�%a�+Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�$a=+Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�#aW+Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�"aU+Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�!aU+Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k� Y�+Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a� [m+Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn� g{+Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a� ga+Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[� gU+Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5+Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[+Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��+�+Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�gy+Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e=+Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�e�a+Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�e+Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�e3+Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�c� +Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�ak+Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�a5+Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�'+Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�NaG+Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Mg�+Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�La�q+Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Kg?+Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��J[�3+Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�I[G+Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�H[5+Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��G[�W+Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Fc?+Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Eg�9+Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �Dg� +Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�Cgi+Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Bg� +Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Aa5+Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��@�%�+Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�?s}+Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�>aU+Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��=[�/+Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�<[�+Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�;[�+Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��:[�M+Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�9[�+Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�8[W+Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �7[�A+Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�6gS+Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��5g�'+Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�4g�+Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�3g5+Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�2eW+Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �1e�W+Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�0eW+Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~�ja� +Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ia�+Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�ha�c+Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��ga�'+Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�fa�U+Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�eaM+Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�da�+Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�cai+Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��ba�?+Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�ag�+Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�`gs+Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�_g�+Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�^g�O+Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�]g=+Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �\g�7+Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�[ae+Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Za�]+Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�Ym_+Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��Xm�9+Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�Wm�3+Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �Vm�/+Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Ug� +Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�TgO+Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�Sg�+Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�Ri�+Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�QcY+Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Pi�!+Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Oa� +Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�gM+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�w+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gW+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J� g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�~gq+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�}g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�|g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�{gm+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��zg�%+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�yg�w+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�xg� +Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�wgk+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�vg�o+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��ug�!+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�tk3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�sgI+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �rg�7+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�qg� +Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�pg�O+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�oe?+Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�ngi+Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�mc3+Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�lcq+Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�ke?+Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � �$o�Q+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�#o�+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�"oi+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��!o� +Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser� uu+Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN� o3+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b� o[+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7� o�+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_� oU+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�og+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�o+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�o� +Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�os+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�ou+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�oW+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�oo+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�oy+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��o�#+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��o�+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o�+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�S+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� +Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`� oW+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z� oK+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� � o�O+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-� o�o+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l� o�m+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3+Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�++Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � �D{�!+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�CwC+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Bw�c+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Aw�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�@wq+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��?w�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�>w}+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��=}�+Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�<s�e+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�;ws+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�:wi+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�9w�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�8wm+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�7wg+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�6so+Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�5w[+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�4u3+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��3u�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�2uw+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�1uU+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�0u� +Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�/u�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�.u[+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��-u�1+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�,u�S+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�+o[+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�*o�s+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�)o3+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�(o;+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�'oi+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�&o� +Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�%oo+Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) � ��$ � 7 � � = � � C�@�.({���V��W�� � v�bU�,Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��aS�;,Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�`S{,Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�_Oa,Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�^S',Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�]S,Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�\Gk,Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�[G�,Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�ZGk,Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��YG�A,Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�XG3,Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �WO�o,Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�V]�y,Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>��U� �i+Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �T�+Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �Sq�+Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �R}�!+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�Q}g+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��P}�9+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�O}�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��N{�7+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�M{c+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�L{k+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �K{�#+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��J{�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��I{�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�HwU+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�Gwu+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�F{�{+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�E{W+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers " � �y � � � u Z � � ; � .�t���H7��Z�P � � 7�],Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]!,Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�M3,Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�eO,Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee� ek,Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�Y7,Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�~Q�),Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�}[�I,Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��|U�=,Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�{Q�C,Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�z]-,Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�yQ=,Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�xQ�{,Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�w[W,Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��v[�S,Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�uU_,Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�tK�,Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�s]G,Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�rS},Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�q]�,Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��p]�Y,Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�o]5,Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�nU5,Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �mS�K,Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�lO�1,Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�kU],Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�jU5,Bill Nottingham <notting@redhat.com>7��@- initscript munging`�iUq,Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�hG�,Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�gUW,Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �fG�w,Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�eU9,Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�dGq,Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�cM�w,Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # � �r k/ � � � G � � � � N �P�m ��e��g �l�@ � � J�'y!,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�&m,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�%oC,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�$m�5,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�#]5,Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�"QE,Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�!]q,Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R� ]M,Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t� ]�,Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-� ]�,Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w� ]�,Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C� ]�-,Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i,Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k,Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;,Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�Q,Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]',Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�]�,Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�]5,Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] ,Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]g,Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�w,Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�]A,Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_,Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��]�/,Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] ,Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� � ]�a,Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o� ]�,Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"� M�{,Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f� ]u,Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9� ],Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�I,Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�]�,Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]',Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�];,Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � [�. � b � - � h ��x�>�}.��i�a*�s�|@ � F�Em%,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�DE3,Tim Powers <timp@redhat.com>=@- automated rebuild9�CE3,Tim Powers <timp@redhat.com><��- automated rebuild�7�Bm�,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�Ae?,Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�@m],Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�?m�},Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��>[�M,Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�=mw,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�<EE,Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�;E3,Tim Powers <timp@redhat.com><<0�- automated rebuildA�:m,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�9{#,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�8yC,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�7yM,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�6y�S,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��5y�',Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�4y!,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�3y�s,Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�2m�e,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�1m�),Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�0m�,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�/e?,Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�.y,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�-yU,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�,y+,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�+y{,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�*y�,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�)yO,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�(m�Y,Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z�jcW,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�icy,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�hco,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�gce,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�f_W,Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�e_=,Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�d_},Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�c_G,Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�b_=,Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�a_},Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�`_=,Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�__?,Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�^K ,Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�]_?,Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�\_�,Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�[_?,Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�Z_?,Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�Y_a,Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�X]?,Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�W]7,Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�V]� ,Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�U]5,Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�T]9,Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�S];,Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�R]i,Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�Q]/,Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�P]/,Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�O_u,Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�NE ,Tim Powers <timp@redhat.com>>.��- rebuilt\�M__,Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Lc�,Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�K_� ,Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�J_g,Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�I]e,Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�HMU,Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�G]S,Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�F]�S,Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i�s�c,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�U,Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�m,Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]� Qo,Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw� Q�!,Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q� Q�,Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M� Q�M,Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`� Qu,Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5,Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�Q},Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQ,Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�},Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_;,Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�_C,Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�_G,Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K ,Elliot Lee <sopwith@redhat.com>@��- rebuiltq� _�,Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�_C,Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�~_E,Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�}_�,Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�|__,Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��{_�1,Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�z]Y,Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�yK ,Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�xeI,Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�wGm,Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�v]+,Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�uK ,Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�t]7,Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�s]C,Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�r]/,Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�q]k,Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�p]+,Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�oe/,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�ncO,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�meq,Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�lcE,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�kc#,Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+�"u�e,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�!s�Y,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy� s�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,� q�k,Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a� qW,Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l� qm,Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf� qa,Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u,Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�=,Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�e�,Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k�,Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1,Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�y,Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�s�k,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� ,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{�,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{W,Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � �4o�S,Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��3m�A,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�2m�o,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�1m�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�0cA,Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�/m� ,Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �.m�/,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�-m�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �,m�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�+m�w,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�*m�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �)m�+,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��(m� ,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�'k�,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�&k�W,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�%k� ,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�$s),Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�#k�i,Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�Hm�,Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Gm?,Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Fm�Y,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Em�,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Dm�!,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�Cm�e,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�Bm�{,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Am�),Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�@m_,Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�?k�],Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�>kS,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�=k�k,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�<qc,Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�;k�q,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�:mW,Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�9ok,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��8k�A,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�7kQ,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��6q�,Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�5S ,Jesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �\q�%,Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��[q� ,Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Zq�u,Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Yq�?,Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�Xqc,Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Ws� ,Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Vs�),Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Us� ,Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�TsO,Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Ss�,Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�RsG,Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Qs�,Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Pm�,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�Osk,Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Nm�,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Mm�9,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�LyA,Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�KuY,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�J{ ,Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Iu�G,Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��pc�-,Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�oc,Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�nc�%,Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�mc�y,Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�lc� ,Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�kc�C,Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�jcc,Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�ico,Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�hc�,Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��gc�C,Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�fc�1,Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�ec� ,Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�dc�,Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�cc},Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�bc�o,Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�aqo,Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�`q�U,Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��_q� ,Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�^}�_,Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�]q�U,Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�ee,Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{,Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mU,Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�a,Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�_�i,Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cg,Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj� _{,Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�c�w,Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�~c�,Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��}_�1,Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�|c�,Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�{_�K,Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�z_E,Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�y[�7,Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��x[�5,Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�w[�,Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�v[�s,Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�u[�E,Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�tcM,Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�scy,Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�rc�,Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��qc�C,Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) A �� � u � � p � 2��}#�$�h � k�>�A A �|�!g�,Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� � g�7,Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i� gq,Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r� c�,Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4� c� ,Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-� g�w,Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�K,Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g?,Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�gU,Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gA,Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cm,Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��g�M,Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�cc,Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQ,Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� ,Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9,Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�o,Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�=,Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�i,Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �g�1,Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7� g� ,Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8� c�,Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=� g�,Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E� c�+,Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj� eu,Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a�,Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�eY,Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC � �O�b � r � S �[ r�� >�R�Y � � e�;ek,Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�:ic,Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�9e�g,Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�8c�?,Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�7g�,Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��6c�?,Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�5gK,Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�4c�Y,Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�3g],Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�2g%,Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�1g;,Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�0cS,Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��/c�G,Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�.c�=,Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�-c�u,Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��,c�-,Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�+c�u,Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �*c�[,Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�)cu,Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�(ce,Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�'ce,Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��&g�-,Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��%g�G,Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�$cE,Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�#�1,Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�"g-,Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0 x z�^ � F � ? � M M � z A�c�v9� �^��T � x i�Xgq,Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�Wku,Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Vk�,Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Ug�c,Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Ti[,Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�Sem,Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�ReG,Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Qi�M,Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�Pe�,Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�Oe�,Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Ni� ,Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�Mie,Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�Liq,Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�Ke},Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�Je� ,Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Ie�,Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�Hek,Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�Geq,Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�Fe�,Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Ee},Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Di�,Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Ce�W,Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�Bam,Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�A]i,Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�@aO,Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�?aY,Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �>a�[,Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�=]�,Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��<e�#,Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 file �S�� x � � � D =!=��X�3��I� ��re�I,Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�qa�k,Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�pgA,Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�oe�,Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��na�%,Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��m� �,Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�l[e,Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�k[�+,Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�j[�m,Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�i[�,Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�hg1,Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�gi�[,Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��fi�K,Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��ee�%,Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��dg�G,Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�cc�=,Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�bc,Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �aa�7,Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�`ak,Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�_ag,Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��^�!�,Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �]e�7,Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�\sA,Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�[aG,Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�ZaQ,Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�Y[M,Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 release z �V � ` � p � = � P ���f��H�?�| �� � � z X�aU,Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a�,Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5,Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f� [w,Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv� g� ,Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch�� e�S,Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\� c[,Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI� c5,Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� ,Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��a�Q,Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{,Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5,Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_E,Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�!,Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�[[,Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�,Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH� [;,Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �i�,Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�~i5,Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�}i],Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��|i�',Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �{i�/,Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�ze3,Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�yeM,Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�xe3,Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �we�_,Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�ve� ,Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�ue�,Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�te3,Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�se�S,Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed " � � �J � � m � U � � � O�8�w���L�w�J��D�M � O�2aC,Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��1a�%,Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�0a�,Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�/a=,Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�.aW,Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�-aU,Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�,aU,Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�+Y�,Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�*[m,Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�)g{,Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�(ga,Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�'gU,Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�&g5,Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�%[�[,Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �$�+�,Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�#gy,Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�"e=,Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�!e�a,Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo� e,Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI� e3,Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~� c� ,Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c� ak,Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH� a5,Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�',Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�a� ,Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[,Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a},Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�W,Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5,Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�[/,Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5,Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�%,Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� ,Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aq,Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configuration N R � � > � { � H � J�����5�#�8�V�?�: � N � �Og� ,Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�Ngi,Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Mg� ,Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�La5,Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��K�%�,Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Js},Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�IaU,Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��H[�/,Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�G[�,Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�F[�,Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��E[�M,Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�D[�,Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�C[W,Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �B[�A,Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�AgS,Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��@g�',Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�?g�,Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�>g5,Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�=eW,Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �<e�W,Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�;eW,Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�:ey,Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�9[q,Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�8[y,Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�7[W,Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�6[�u,Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�5g�,Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�4g�e,Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�3g�q,Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patch m .�B � � � � + � _ � z M�w� �����Z � m }�lg�,Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�kgs,Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�jg�,Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�ig�O,Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�hg=,Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �gg�7,Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�fae,Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �ea�],Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�dm_,Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��cm�9,Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�bm�3,Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �am�/,Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�`g� ,Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�_gO,Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�^g�,Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�]i�,Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�\cY,Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��[i�!,Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Za� ,Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�YaG,Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Xg�,Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Wa�q,Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Vg?,Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��U[�3,Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�T[G,Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�S[5,Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��R[�W,Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Qc?,Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Pg�9,Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings � n �> a � � = � j � M� ��:��8� � ��g�%,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�w,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� ,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�gk,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�o,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)�� g�!,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�k3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�~gI,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �}g�7,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�|g� ,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�{g�O,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�ze?,Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�ygi,Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�xc3,Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�wcq,Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�ve?,Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�ua� ,Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ta�,Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�sa�c,Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��ra�',Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�qa�U,Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�paM,Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�oa�,Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�nai,Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��ma�?,Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version � �I��C � � J � 4 � � u��3�s�H�J�K�y� � t�$o,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�#o� ,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�"os,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�!ou,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`� oW,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l� oo,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q� oy,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)�� o�#,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)�� o�,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o�,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�S,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� ,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oW,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�oK,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�O,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�o�o,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�m,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�+,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�gM,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�w,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\� gW,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J� g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J� g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J� g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i� gq,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�g3,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gm,Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827) ! q �-� � Z � \ � n � ] � r ���9�S�n�o�A�` � q m�Ewi,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Dw�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�Cwm,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�Bwg,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�Aso,Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�@w[,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�?u3,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��>u�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�=uw,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�<uU,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�;u� ,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�:u�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�9u[,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��8u�1,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�7u�S,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�6o[,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�5o�s,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�4o3,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�3o;,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�2oi,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�1o� ,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�0oo,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �/o�Q,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�.o�,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�-oi,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��,o� ,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�+uu,Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�*o3,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�)o[,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�(o�,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�'oU,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�&og,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�%oa,Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646) ` ��U � V � e � Y � ` c�� y�uk� � �� � ` � �a{�#-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��`� �i,Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �_�,Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �^q�,Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �]}�!,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�\}g,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��[}�9,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�Z}�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Y{�7,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�X{c,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�W{k,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �V{�#,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��U{�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��T{�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�SwU,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�Rwu,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�Q{�{,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�P{W,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �O{�!,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�NwC,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Mw�c,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Lw�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�Kwq,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Jw�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Iw},Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��H}�,Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Gs�e,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�Fws,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572) � � � � $ � ! � � C�a�g�d�R�5� � �>�z}�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��y{�7/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�x{c/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�w{k/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7�v�'�I.Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �us�#.Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ts�.Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �s}�!.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�r}g.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��q}�9.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�p}�.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��o{�7.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�n{c.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�m{k.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �l{�#.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�7�k�'�I-Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �js�#-Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��is�-Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �h}�!-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�g}g-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��f}�9-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�e}�-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��d{�7-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�c{c-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�b{k-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake Q c�` � N � � H�9�#�K�`�f�c � Q � �s�#1Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�1Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�91Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�71Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l� {c1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y� �[0Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G� s� 0Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#0Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�0Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�90Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�70Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{c0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{k0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakey��[/Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G� s� /Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#/Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��~s�/Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}}�!/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�|}g/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��{}�9/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) m �9 � G � 8 � "�J���I�F�4 � m y�*�[3Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�)s� 3Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �(s�#3Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��'s�3Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �&}�!3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�%}g3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��$}�93Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�#}�3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�"�)� 2Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�!�[2Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G� s� 2Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#2Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�2Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }g2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�92Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�72Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{c2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�"��)� 1Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[1Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� 1Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers 2 � � 1 � " � 4����� �� � 2y�?�[5Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�>s� 5Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �=s�#5Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��<s�5Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �;}�!5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�:}g5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��9}�95Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�"�8� �'4Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�7�)�S4Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�6�)� 4Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�5�[4Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�4s� 4Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �3s�#4Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��2s�4Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �1}�!4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�0}g4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��/}�94Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�.}�4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�-� �'3Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�,�)�S3Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�+�)� 3Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file � � � A � 2 � �D���� ��� � �G�Ss� 7Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Rs�#7Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Qs�7Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �P}�!7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�O}g7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.�N��C6Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�M� �'6Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�L�)�S6Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�K�)� 6Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�J�[6Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Is� 6Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Hs�#6Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Gs�6Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �F}�!6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�E}g6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��D}�96Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�.�C��C5Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�B� �'5Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�A�)�S5Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�@�)� 5Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file % �^ � w � � ���8Q+y�7�% � �gs�#9Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��fs�9Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �e}�!9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-�d��E8Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�c��C8Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�b� �'8Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�a�)�S8Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�`�)� 8Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�_�[8Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�^s� 8Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �]s�#8Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��\s�8Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �[}�!8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�Z}g8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�-�Y��E7Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�X��C7Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�W� �'7Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�V�)�S7Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�U�)� 7Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�T�[7Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade 8 � �t.��\ � � D � � r , � � Z � � B � � p *��X��@��n(��V��>��l&��T��< � � D8 � 85858c0f6fb05e3f92e73c82b1777add44920fe24aa63f4d68eb3c7fc9aec8b6D7 � a709e657ebb7d23dd2180b523075f878793c71209814220690ef010e8ec31568D6 � 60a934f8153f3ee3a3758f3701c29897ae96e2551d0371d108d5e5531dae042eD5 � 2069466d1065184aaae071edfd04861a5467f6acfd198066839824f92d8a4b91D4 � da81224834ce74b674e5d32e584c4a257c3d2e7714994869aedcceca86756066D3 � bc9d91d3e496b3ca3400ea4406521cf565b885351fcc9202dc9eb86ffd879cdfD2 � 47c7bda9200dbbc2f49f9d1f59d961772608144bb7387bfb84f154079859555eD1 � a1341189b02fdf7787eadfe85b14cfe80d276053e35b70cc79398e8b33123107D0 � c87b086c0e7253e0b2aa7c5f1f74baa46c601fd8c263d7fba200d6570bf885aaD/ � 2a834b0984a6a6b1de63ce0028175d15b06ddf272e46c76cd69b1213db2c72feD. � 5d2d98bf75f855424702dcf4a9619c2dd7276ec862c19b3b575721216a4201f9D- � 4e057ca61f6a1b9909afd5fe624f4dfa2b003a9962889aab7ba38c87074c2f06D, � 0b5c1f978e78542c12a741498379a275ece089ec87ac7a8ce045b78380ecc5eaD+ � fee71c95669a404aa273073f4d5afa80f6c1931fb04a65e751c8a76bcf475a25D* � 93c6769bf5793ec4db2e5553d7fb06158b23b7ad4732fa20772cb82c321de95fD) � 22b54d192dd5ee34c46a1ca91678156673b87012fdb392127a6440d3e535c0f5D( � 00bb2054c1a5a92199b177c7c09fd3e3e97105a12e478cd2ae5328ad4c8e2e3dD' � 134d713721425c4e78ef30f1da287e32b7042bb51a31bfba2f203d7c1cd659d5D& � 2de3c9c428e153280ef7382f976ff0cf52a769cd1bc5343b0f8a96883a0ddc70D% � a60e13ef7afb9f4f717efe5b18dedd0b831a0ef2948d6eab1ebd077221a4ab69D$ � 15046bbf6ecd39f68f24241e798d4b02eac20fc859c853e6442121b47a443e2eD# � 16cab55a3b7098986583e8321a1ff8c159cdd39b15f1197348c02920b4a22015D" � 494a948180feec32b62388c22878290bee73cd0298961c8938bd3175981f4977D! � 62395bf1444b470e53d6c72d44c1c9cf59beb9f5b4ca6eb64577574dba3fd137D � 0a886ee9616ee8ad517426644e3d938b53d7e48a3fe0f4c92925dfc34f05f515D � 280090b6dd997cdf65241961382b51f2e16d6c00746a8d18d5ad4f12ea5110daD � c9b145e620308495576d7fc2977264eea0725bd5a7829422680fcbf2a8371fd5D � a0e9c7745dc5565347119be0b00cf028ed59123319cb248430a8939c33c6b718D � f027f8961b4eb2e2d52e89f3c4e1bd8bba97923fda68ebab2b24974773c0d2acD � c8b7a61e5db91c19cddfde900da28703e23be6a6d0e18a5e2fb20f39a8c65d1cD � 8c51c8189d9c266c0506247ed03fdb607b66b2786ae665b48aa1c03a92cb771fD � 4f4e8784dde132353df54e5634f8a9a7020a67e7e66d981440792522da6ec3a3D � 63f9c9943c2c139bf2877de058858c380a2daa0e2325bcc1832e60296d781111D � 13026f8bcb24249dddda560b410f9470d1b5d02559707523dc841976676e0ef0D � 3b969319519f179c58c5d7e430203896948293c2eb65522504391e30f9c4cc17D � 5dead97cc05b6d9480569beb7315ef3c59a778cf43e0447bcc2d5bcaec56c05bD � 1104da9270ec716eed0dd68c3f38712ec14d2d6d0c556cb0c8e4ea4a2a3972b9D � d8312a2ac6b98e20c38e6e514419129edf934b0cac288ef12da38e8bc4328fe3D � cb27e3568d6ecb011ad5aa4179094d8086decd908e15e9735096f7774c07c718D � bdc46cac59e34229fa191939904a4cbf7d46a4b681ddded33cfddf08f9505149D � 1de1414e6c71466f2d8ae4d0332449c744331666b41a3ef530c31def7f337d16D � fdc06ce4639d7c2be8af6b9e8e11be2e86b5ecce1185d5a17c17d55114e379c7D � f067d04dbb60f81669dfe7d6eef8edd825b2f67c19e7ff6ed22c96468f802234D � e96d812771644136c6fef6f3ee6eeb188f179012a335af887c8f84f5e2c1570bD � 143b1d3d8a9416eb2705b933d453593c1c6d48ca7ffeac08e53000f819f29941D � f61bfd2393323757b4b495cac05b580549b3c172262c1e6f0931a806a0a5f1beD � 2a3d4c563221bae814bde69fd447c66e32568777384ae6d5739f42db47d5171aD � 0befd1e2eff8991dd8e7405aac5a47410f7a7e3576573a4bcf5f36d463953f1dD � 9921eddf542aa58f43da58af9d2991f023c3ac12b552068c887c9ab0dc47c25bD � e0082ae55a93464dcef73ff3b7e2bff64949ef1770e8529c0b827c04b117a44fD � bccdb037c34dfeba806f3c27b540342a97951ccac8ba90a2d73d5db4061fd078D � 1cf7c9387dc6a0cf703e47d1b97b8f79fdc1d7b56d91eed697305236311a136dD � d6c69f7d7560c807821e48b8b030d1510319694f2cc6f7bdd9ce63151da78c28D � 030ce594206ffd929b9808837e274a1681233c54c5c0cc91b21a0f22ce7b4de2D � 2893161bac3671bc6230f1a2d37870ca9c38cb36cd497af80cf86eca192fc841D � 1aabf1b5eb0d1f8dbd7a30322ef316173bab559442d89e85b6338435d7736542 8 � �t.��\ � � D � � r , � � Z � � B � � p *��X��@��n(��V��>��l&��T��< � � Dp � 1f3ad381db736d5e9d35ad465b1e950a54465048184d183e1cfde190f0c19fdcDo � d67f6a751d0616f2ba6d4f311040d92b105ce26c9bb24ef3b9799c78dcfff1deDn � 7b073ae98adfd5e146b33594350921d292540b2bb9a3ec33cd498b0682c313faDm � a49b6456c86c4e67f4ff63fce9cfa66d8db547832cf11df93f69e9693f5975caDl � 099d057376439d5a53a33c52ce89d33d51eae3a57dd802b1e3b1fc359339ac97Dk � e541bc3a1cf093ec837a058edfcc83a9d6984bb544daabafb3aa64a9fa5ebf9eDj � dc69bc3057e48cda9da5ebc7e2fd80f0eba61cc07baaf5047af455bf01723b79Di � ea01f0d1a7107d1295cfa02f26c30c0ccdc6ba4b18a45314d7b22453e36794d6Dh � 063e62b6e0e753940430b8e9f0f4cf9e20cc0481be02828b7a2a2fa3b40ee689Dg � bbd6d161491abdb2c04ec057d34a2de1df4a6b6be2fcbaba69b3982e812b7b28Df � ad37c4264b495e7e83a69441b4cb7198ffa28fb6f8565578cb4bca89c67a95ecDe � 650c342c16c729ed35175c8d6b3bafa195cbae0eb002cc868998adf5041f33bcDd � 21055280250a5a6ec47670fef45098dabac9b487f2bc98da6f04363ea9753a58Dc � 9d10ae4b0371e6b125b204480377bb115ed00086913aa55925bfd1a6f53789b5Db � 7693a1f8775125c965a2d203533deddd4d3640d3393bb8ad7d36f730776b248dDa � d678a7c4fd888493eb852a85633a62e0a09bd5914169d690bc1491cbc2cde14eD` � 455c66ccb39f06ef7b0dbff61babd937aa34b1d77c50921c5ee7c974b736970cD_ � 5b9d03730c184b362e6014b607cd739f552c51e46bfcc31e02869fd9c98f80d2D^ � d8cdebfdf9a07b17f5cb47bca017e634ab65db721874ccbfaeaadbd3df57cb7eD] � 3010a9080c1fdb5bc996b872d75b54fd1f1f11c6bd3cf7e3cd9a636af284269bD\ � c136f59c1309fd696a5ad94a885f2e929a97e702f645037004f8ead4c1bfdb42D[ � ef3c658605841d7c95ed9aeef621b9486018a99efe0ed55058b71478f6d8b985DZ � e4efa678124bb971d20f39bb465cc30827409707aeeebae9a239c3ec8beb1ab8DY � 1fdf049bcc6efb1472f8ae9e2d508270aed9abac5c1f350ab7d6e988f30e64c0DX � 247536011fa9574b24a0fa179703e08557ed8fad8c9dc7b3cda0ec96a2cb4fe3DW � 2a598d5b78705042f661d660de488d16cbb6cc2068f50b904afa53cb63d1c59bDV � 5bf0a8670d913dff4dc7aebffa9932a45b2560353fe17ac3924dc3d805f2bf57DU � 1458236b2554f6353156e6500c214a9d9a8dd5de7094ef7fd47df6bf2336903aDT � cbab678d023ce14ad628549fe9f2aec32c28a18d674cb730bd5b2a6b735713e1DS � 38eb80594b267b0ccac6e3f3357e49f1fbd8a8fe34b26c2838c259a7fa980dd2DR � 8cad50643877565b76594e7a767101b68f43f69e7a7d81201fff78f96f14b537DQ � f40710fda8edd48770a3f46fa51347b45631b31b83d0e56a22fce2f34b6920bbDP � b965fd09fbe006836022e9dcb6c6c1dbe524f5dfa56c6e46e2322b75af43dc5eDO � 76543c5f2ab47496a2666ab64bfa8fd66da7f2645d67bf87b701750e0a9d408dDN � ced3886aed415e225389860bdbaa5b077e106b6a1ac397a422b8ff0b980656c5DM � 1cd7e57a0fb314f8623130e81ffbff4048aa6830a37cab23a3a5368b5157d376DL � fcc9d047542ab5fd4698d9587234ff0376bfd54e2edaf810533f57a9903a1d1aDK � 9d5d91ecef579b7803f9d4225dd0430df4959e7ce7b2da4629c03234e892aaadDJ � f6c8fd8a49aa6d4b51eebdb55d28ec86369f84742a6593185880e599e44344b0DI � 7489f06b8b96b597b8b7c3d295e71ed2ee56928af8950fa43339f5cfdbbbea1fDH � 0af23600c981874d0f906c74c1c816631ea4faa5bcca3a9aa75f78877100fd07DG � dfc1bc92ca857e21713d13ddeb4bc769c14adcbdd81860b75d6fce7b192fdeb1DF � 179e305e0fe5bb8bfdc3e13a44f96bdd9fb9748274dfa74908061ada148d70e4DE � 593f5ee550a57fac722fffebccbc8f099b32a8d400481513fb0ed1585a231f38DD � 277e8e7408324a55505e35bf7dbac06002576219eb516d4d2f56700701137ab1DC � 633539ec5af596588c699940b0548bce9442b8e7a68174fec41febf2276fa091DB � f3812f7b1cedbeaa6fd8493877d71524e52a991f0619668fd02b3c43cb84dd92DA � ca4f425c9978dbb0cc75eb05f43348e3798afe7d33b82255b09bad8219f0bdc4D@ � 902204ce237be17859e57f18fbf036a38109d4f4f80733e471a4ea999c867dd9D? � 9cef63127a9c2e133b6d13b5d5555746a9c85951d31db73a374f360984aa283aD> � ac34e1c600690f58a79a17d787111a092a4032a5f38332cf1cdfbf3cf1423032D= � 90b78d1243b4603f359b0740afab0993c768113e592efb24668cc7efa3c967f2D< � f8bc0f5be0e6c7369cc456f5718b23bfdc280405a3e3788d568c4731e63eba36D; � 07670e2efe5a90a41907c0ae146e23969b2b63a7df589fc4abec492036090dc4D: � 6201c63791da528e3ccf7efbdb213c386fee175f68707018f6b78c1dbb4561eeD9 � 2a53a4bfdef920826b0db400319d1e4d4a36aea639ba114fbaa99034313e857d � �9 R , z � ��q&�����: � �1�z�'�=:Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�y��E:Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�x��C:Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�w� �':Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�v�)�S:Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�u�)� :Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�t�[:Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�ss� :Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �rs�#:Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��qs�:Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �p}�!:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�1�o�'�=9Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�n��E9Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�m��C9Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�l� �'9Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�k�)�S9Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�j�)� 9Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�i�[9Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�hs� 9Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers E {� � ' @ h��X��� � E �.� ��C<Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"� � �'<Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S<Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"� �)� <Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey� �[<Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� <Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#<Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�<Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�!��'� ;Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1��'�=;Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-���E;Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.���C;Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �';Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S;Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� ;Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�~�[;Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�}s� ;Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �|s�#;Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��{s�;Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) ! W O� u � ' � d � J � � L�\���\�e �X�=�g � � W O�.]G=Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�-S}=Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�,]�=Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��+]�Y=Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�*]5=Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�)U5=Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �(S�K=Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�'O�1=Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�&U]=Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�%U5=Bill Nottingham <notting@redhat.com>7��@- initscript munging`�$Uq=Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�#G�=Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�"UW=Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �!G�w=Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D� U9=Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY� Gq=Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`� M�w=Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v� U�=Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs�� S�;=Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�S{=Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�Oa=Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�S'=Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�S=Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�Gk=Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�G�=Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�Gk=Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��G�A=Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�G3=Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �O�o=Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�]�y=Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!��'� <Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1��'�=<Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-���E<Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9 $ s �5�C � � � 8 d � � 6��]#��#�R�C�0�j ��q( � s ?�R]'=Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�Q]�=Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�P]5=Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�O] =Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�N]g=Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�M]�w=Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�L]A=Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�K]_=Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��J]�/=Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�I] =Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �H]�a=Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�G]�=Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�FM�{=Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�E]u=Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�D]=Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��C]�I=Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�B]�=Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�A]'=Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�@];=Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�?]=Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�>]!=Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�=M3=Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�<eO=Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�;ek=Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�:Y7=Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�9Q�)=Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�8[�I=Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��7U�==Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�6Q�C=Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�5]-=Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�4Q==Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�3Q�{=Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�2[W=Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��1[�S=Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�0U_=Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�/K�=Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user. E g �V � d l � e I��_�V��Z��� $ � E ��py�'=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�oy!=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�ny�s=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�mm�e=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�lm�)=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�km�=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�je?=Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�iy=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�hyU=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�gy+=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�fy{=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�ey�=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�dyO=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�cm�Y=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�by!=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�am=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�`oC=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�_m�5=Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�^]5=Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�]QE=Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�\]q=Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�[]M=Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�Z]�=Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�Y]�=Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�X]�=Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�W]�-=Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�V]i=Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�U]k=Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�TY;=Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��S]�Q=Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890 ! � X��H � � { D � � � � Z �_�JJ�vD��N��T � s�]� =Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�]5=Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�]9=Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�];=Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`� ]i=Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC� ]/=Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C� ]/=Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g� _u=Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/� E =Tim Powers <timp@redhat.com>>.��- rebuilt\�__=Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�c�=Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�_� =Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�_g=Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�]e=Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�MU=Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�]S=Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�]�S=Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F� m%=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�E3=Tim Powers <timp@redhat.com>=@- automated rebuild9�~E3=Tim Powers <timp@redhat.com><��- automated rebuild�7�}m�=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�|e?=Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�{m]=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�zm�}=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��y[�M=Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�xmw=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�wEE=Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�vE3=Tim Powers <timp@redhat.com><<0�- automated rebuildA�um=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�t{#=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�syC=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�ryM=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�qy�S=Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. - � �h�j � g 2 � � ' � � � o � 4��@�|2��D��u1��K�f�B�}H � � N�>_C=Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�=_G=Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�<K =Elliot Lee <sopwith@redhat.com>@��- rebuiltq�;_�=Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�:_C=Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�9_E=Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�8_�=Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�7__=Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��6_�1=Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�5]Y=Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�4K =Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�3eI=Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�2Gm=Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�1]+=Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�0K =Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�/]7=Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�.]C=Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�-]/=Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�,]k=Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�+]+=Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�*e/=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�)cO=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�(eq=Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�'cE=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�&c#=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�%cW=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�$cy=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�#co=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�"ce=Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�!_W=Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K� _==Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk� _}=Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP� _G=Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K� _==Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk� _}=Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�_==Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�_?=Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�K =Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�_?=Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�_�=Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�_?=Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�_?=Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�_a=Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�]?=Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�]7=Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup J � �R � j � % � K * ��?x�K����` J ��Uk�==Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�Te�=Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�Sk�=Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�Rk�1=Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�Qk�y=Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�Ps�k=Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�Os� =Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�N{�[=Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�M{�=Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�L{W=Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�Ks�c=Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��JQ�U=Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �IQ�m=Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�HQo=Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�GQ�!=Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�FQ�=Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�EQ�M=Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�DQu=Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��CQ�5=Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�BQ}=Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�AQQ=Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�@Q�}=Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�?_;=Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3 n K � s _ � � ���xp�b n �p�fm�w=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�em�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �dm�+=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��cm� =Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�bk�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�ak�W=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�`k� =Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�_s)=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�^k�i=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�]u�e=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�\s�Y=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�[s�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�Zq�k=Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�YqW=Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�Xqm=Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�Wqa=Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�Vq�u=Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � | � 4 � 0 � � � 6�@�q�Wj �� � �r�}m�{=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �|m�)=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�{m_=Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�zk�]=Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�ykS=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�xk�k=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�wqc=Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�vk�q=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�umW=Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�tok=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��sk�A=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�rkQ=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��qq�=Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�pS =Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �oo�S=Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��nm�A=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�mm�o=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�lm�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�kcA=Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�jm� =Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �im�/=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�hm�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �gm�=Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. } U � � � Q ���B���"�< } �;�s�=Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ� sG=Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config�� s�=Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver�� m�=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l� sk=Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6� m�=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��m�9=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�yA=Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�uY=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�{ =Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�u�G=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�m�=Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�m?=Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�m�Y=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|� m�=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��m�!=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�~m�e=Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition \ � � � � M ��!| a�}�0�( � \ `�%cc=Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�$co=Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�#c�=Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��"c�C=Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�!c�1=Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~� c� =Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq� c�=Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm� c}=Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'� c�o=Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m� qo=Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�q�U=Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��q� =Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�}�_=Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�q�U=Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �q�%=Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��q� =Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�q�u=Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��q�?=Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�qc=Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�s� =Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �s�)=Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�s� =Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�sO=Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage K +3 = � B -��3a�;1���I � K q�9c�=Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��8_�1=Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�7c�=Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�6_�K=Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�5_E=Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�4[�7=Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��3[�5=Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�2[�=Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�1[�s=Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�0[�E=Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�/cM=Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�.cy=Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�-c�=Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��,c�C=Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��+c�-=Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�*c=Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�)c�%=Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�(c�y=Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�'c� =Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�&c�C=Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0) J �d � Y � U � @ � , ����>�r�5�c d � � J [�TgU=Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�SgA=Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�Rcm=Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��Qg�M=Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�Pcc=Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�OcQ=Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�Nc� =Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��Mg�9=Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�Lc�o=Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��Kg�==Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�Jg�i=Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �Ig�1=Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�Hg� =Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�Gc�=Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�Fg�=Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�Ec�+=Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�Deu=Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�Ca�=Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�BeY=Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�Aee=Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�@a�{=Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�?mU=Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �>a�a=Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�=_�i=Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�<cg=Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�;_{=Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�:c�w=Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful) U �a � 4 � 7 7 � � 2 � �E�8� �@�N � � U _�ng]=Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�mg%=Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�lg;=Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�kcS=Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��jc�G=Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�ic�==Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�hc�u=Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��gc�-=Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�fc�u=Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �ec�[=Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�dcu=Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�cce=Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�bce=Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��ag�-=Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��`g�G=Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�_cE=Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�^�1=Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�]g-=Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�\g�=Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �[g�7=Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�Zgq=Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�Yc�=Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�Xc� =Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�Wg�w=Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��Vg�K=Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�Ug?=Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS � �4 � � ; � m � k � n �L�+��O�q�=�i� � �9� e�=Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet�� i� =Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�ie=Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�iq=Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�e}=Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�e� =Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�e�=Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�ek=Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�eq=Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�e�=Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n� e}=Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�i�=Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �~e�W=Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�}am=Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�|]i=Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�{aO=Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�zaY=Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �ya�[=Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�x]�=Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��we�#=Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�vek=Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�uic=Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�te�g=Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�sc�?=Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�rg�=Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��qc�?=Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�pgK=Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�oc�Y=Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch � ���% � � � ? � � > � T�S�_� �|`|0= � �"�%[�m=Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�$[�=Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�#g1=Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�"i�[=Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��!i�K=Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)�� e�%=Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param�� g�G=Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N� c�==Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn� c=Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� � a�7=Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�ak=Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�ag=Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���!�=Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �e�7=Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�sA=Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�aG=Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�aQ=Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�[M=Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�gq=Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�ku=Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�k�=Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�g�c=Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�i[=Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�em=Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS� eG=Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch�� i�M=Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|� e�=Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD x ;�? � E � I � R � l �{�c ��bq�C�� � x t�Ca� =Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��Ba�Q=Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�Aa{=Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�@a5=Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�?_E=Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�>_�!=Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�=[[=Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�<[�=Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�;[;=Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �:i�=Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�9i5=Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�8i]=Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��7i�'=Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �6i�/=Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�5e3=Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�4eM=Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�3e3=Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �2e�_=Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�1e� =Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�0e�=Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�/e3=Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�.e�S=Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��-e�I=Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�,a�k=Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�+gA=Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�*e�=Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��)a�%=Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��(� �=Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�'[e=Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�&[�+=Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �U7 � U � I � J � � l� 4�M���)��\ � � a�cga=Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�bgU=Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�ag5=Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�`[�[=Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �_�+�=Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�^gy=Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�]e==Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�\e�a=Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�[e=Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�Ze3=Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�Yc� =Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�Xak=Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�Wa5=Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��Ve�'=Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�Ua� =Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �Ta�[=Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�Sa}=Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�Ra�W=Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�Qa5=Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�P[/=Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�Og5=Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��Ne�%=Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�Me� =Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�Laq=Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�KaU=Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�Ja�=Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�Ia5=Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�H[w=Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�Gg� =Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��Fe�S=Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�Ec[=Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�Dc5=Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2 K �+�b � \ � e e ��Q��(�[�]���H�6 � K y�[�=Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�[�=Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it�� [�M=Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�[�=Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�~[W=Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �}[�A=Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�|gS=Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��{g�'=Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�zg�=Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�yg5=Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�xeW=Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �we�W=Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�veW=Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�uey=Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�t[q=Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�s[y=Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�r[W=Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�q[�u=Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�pg�=Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�og�e=Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�ng�q=Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�maC=Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��la�%=Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�ka�=Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�ja==Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�iaW=Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�haU=Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�gaU=Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�fY�=Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�e[m=Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�dg{=Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver) � y � � � D � X � 6��A�u��c��+ � c� m_=Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)�� m�9=Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N� m�3=Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� � m�/=Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�g� =Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�gO=Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�g�=Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�i�=Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�cY=Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��i�!=Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�a� =Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�aG=Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�g�=Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�a�q=Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�g?=Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��[�3=Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�[G=Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�[5=Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h�� [�W=Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN� c?=Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N� g�9=Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� � g� =Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e� gi=Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�g� =Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�a5=Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���%�=Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�s}=Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�aU=Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��[�/=Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch merged � _�k < � S � A � h 4���=�� ��ve � L�:k3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�9gI=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �8g�7=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�7g� =Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�6g�O=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�5e?=Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�4gi=Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�3c3=Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�2cq=Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�1e?=Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�0a� =Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�/a�=Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�.a�c=Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��-a�'=Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�,a�U=Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�+aM=Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�*a�=Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�)ai=Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��(a�?=Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�'g�=Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�&gs=Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�%g�=Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�$g�O=Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�#g==Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �"g�7=Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�!ae=Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� � a�]=Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20 u �M � . � < � � 6 � � O����h+z�|� � u v�Vo�=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �Uo�S=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��To� =Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�SoW=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�RoK=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �Qo�O=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�Po�o=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�Oo�m=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�Ng3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�Mg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�Lg�+=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�KgM=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�Jg�_=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�Ig�w=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�HgW=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�Gg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�Fg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�Eg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�Dgq=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�Cg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�Bg3=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�Agm=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��@g�%=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�?g�w=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�>g� =Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�=gk=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�<g�o=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��;g�!=Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066) � {�| � 8 � J � k � � ~ -�/�A�0�E����� �& � }�vu� =Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�uu�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�tu[=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��su�1=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�ru�S=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�qo[=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�po�s=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�oo3=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�no;=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�moi=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�lo� =Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�koo=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �jo�Q=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�io�=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�hoi=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��go� =Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�fuu=Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�eo3=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�do[=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�co�=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�boU=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�aog=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�`oa=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�_o=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�^o� =Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�]os=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�\ou=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�[oW=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�Zoo=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�Yoy=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��Xo�#=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��Wo�=Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315) G �%�H � n � � � ) { � y��T�g��%��� G �>�}�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{c=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{k=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �{�#=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�wU=Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s� wu=Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y� {�{=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f� {W=Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!=Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z� wC=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�w�c=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�w�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�wq=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�w}=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��}�=Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�s�e=Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�ws=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m� wi=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�w�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�~wm=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�}wg=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�|so=Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�{w[=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�zu3=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��yu�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�xuw=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�wuU=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661) " � c�` � N � � = � | # � } %�5��|5�>�v1��@�Z � � e�7S}>Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�6]�>Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��5]�Y>Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�4]5>Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�3U5>Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �2S�K>Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�1O�1>Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�0U]>Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�/U5>Bill Nottingham <notting@redhat.com>7��@- initscript munging`�.Uq>Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�-G�>Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�,UW>Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �+G�w>Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�*U9>Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�)Gq>Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�(M�w>Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�'U�>Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��&S�;>Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�%S{>Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�$Oa>Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�#S'>Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�"S>Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�!Gk>Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte� G�>Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V� Gk>Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.�� G�A>Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:� G3>Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� � O�o>Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�]�y>Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��=Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �q�=Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) $ c �=�J � � � = q � � L��J ��C�< �����k�] � c p�[]�>Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�Z]5>Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�Y] >Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�X]g>Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�W]�w>Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�V]A>Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�U]_>Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��T]�/>Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�S] >Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �R]�a>Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�Q]�>Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�PM�{>Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�O]u>Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�N]>Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��M]�I>Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�L]�>Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�K]'>Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�J];>Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�I]>Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�H]!>Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�GM3>Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�FeO>Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�Eek>Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�DY7>Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�CQ�)>Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�B[�I>Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��AU�=>Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�@Q�C>Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�?]->Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�>Q=>Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�=Q�{>Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�<[W>Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��;[�S>Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�:U_>Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�9K�>Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�8]G>Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021) � �%�w M � " * � n # � �j xK��J��� � � J�yy!>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�xy�s>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�wm�e>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�vm�)>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�um�>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�te?>Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�sy>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�ryU>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�qy+>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�py{>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�oy�>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�nyO>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�mm�Y>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�ly!>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�km>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�joC>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�im�5>Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�h]5>Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�gQE>Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�f]q>Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�e]M>Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�d]�>Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�c]�>Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�b]�>Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�a]�->Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�`]i>Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�_]k>Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�^Y;>Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]]�Q>Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�\]'>Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 final ! y n�c � r 6 � � � M � @ �%�|��C��H�Y � y F�]5>Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�]9>Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�];>Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�]i>Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�]/>Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�]/>Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�_u>Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�E >Tim Powers <timp@redhat.com>>.��- rebuilt\�__>Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�c�>Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�_� >Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�_g>Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�]e>Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN� MU>Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U� ]S>Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V� ]�S>Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F� m%>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759� E3>Tim Powers <timp@redhat.com>=@- automated rebuild9�E3>Tim Powers <timp@redhat.com><��- automated rebuild�7�m�>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�e?>Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�m]>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�m�}>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��[�M>Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�mw>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�EE>Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9� E3>Tim Powers <timp@redhat.com><<0�- automated rebuildA�m>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�~{#>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�}yC>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�|yM>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�{y�S>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��zy�'>Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257) - �@��C � @ � � m � c � T � � ,�a �_�x�~4��a �z�� �{ � P�G_G>Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�FK >Elliot Lee <sopwith@redhat.com>@��- rebuiltq�E_�>Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�D_C>Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�C_E>Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�B_�>Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�A__>Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��@_�1>Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�?]Y>Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�>K >Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�=eI>Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�<Gm>Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�;]+>Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�:K >Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�9]7>Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�8]C>Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�7]/>Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�6]k>Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�5]+>Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�4e/>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�3cO>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�2eq>Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�1cE>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�0c#>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�/cW>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�.cy>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�-co>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�,ce>Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�+_W>Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�*_=>Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�)_}>Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�(_G>Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�'_=>Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�&_}>Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�%_=>Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�$_?>Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�#K >Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�"_?>Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�!_�>Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL� _?>Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL� _?>Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]� _a>Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK� ]?>Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG� ]7>Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�]� >Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threads �b�h | H � Z � � DW�'z�I�E� x�^e�>Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�]k�>Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�\k�1>Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�[k�y>Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�Zs�k>Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�Ys� >Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�X{�[>Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�W{�>Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�V{W>Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�Us�c>Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��TQ�U>Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �SQ�m>Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�RQo>Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�QQ�!>Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�PQ�>Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�OQ�M>Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�NQu>Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��MQ�5>Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�LQ}>Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�KQQ>Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�JQ�}>Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�I_;>Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�H_C>Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps L � 5 � ] � I � �� ���bZ � L }�om�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �nm�+>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��mm� >Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�lk�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�kk�W>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�jk� >Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�is)>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�hk�i>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�gu�e>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�fs�Y>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�es�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�dq�k>Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�cqW>Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�bqm>Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�aqa>Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�`q�u>Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��_k�=>Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � @ � , < � �B�L�}�cv�� � � �m�)>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�m_>Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�k�]>Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�kS>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�k�k>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�qc>Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,� k�q>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�mW>Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�~ok>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��}k�A>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�|kQ>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��{q�>Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�zS >Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �yo�S>Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��xm�A>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�wm�o>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�vm�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�ucA>Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�tm� >Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �sm�/>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�rm�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �qm�>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�pm�w>Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled F _ � � � [ � �L�� �, � F Z�sG>Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��s�>Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��m�>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�sk>Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�m�>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��m�9>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�yA>Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�uY>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�{ >Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�u�G>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx� m�>Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS� m?>Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!� m�Y>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|� m�>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)�� m�!>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�m�e>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�m�{>Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc i A�a � Q � M � \�b�M�2�=q � i p�-c�>Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��,c�C>Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�+c�1>Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�*c� >Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�)c�>Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�(c}>Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�'c�o>Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�&qo>Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�%q�U>Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��$q� >Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�#}�_>Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�"q�U>Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �!q�%>Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64�� q� >Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1� q�u>Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.�� q�?>Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g� qc>Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}� s� >Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �s�)>Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�s� >Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�sO>Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�s�>Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context } �4_ g 7 q v a-�g��oe� � } q�Ac�>Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�@_�K>Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�?_E>Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�>[�7>Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��=[�5>Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�<[�>Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�;[�s>Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�:[�E>Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�9cM>Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�8cy>Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�7c�>Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��6c�C>Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��5c�->Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�4c>Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�3c�%>Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�2c�y>Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�1c� >Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�0c�C>Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�/cc>Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�.co>Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995) f v � f [ � W � B � .����@�t�7�e f ��[g�M>Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�Zcc>Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�YcQ>Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�Xc� >Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��Wg�9>Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�Vc�o>Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��Ug�=>Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�Tg�i>Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �Sg�1>Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�Rg� >Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�Qc�>Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�Pg�>Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�Oc�+>Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�Neu>Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�Ma�>Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�LeY>Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�Kee>Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�Ja�{>Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�ImU>Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �Ha�a>Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�G_�i>Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�Fcg>Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�E_{>Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�Dc�w>Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�Cc�>Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��B_�1>Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856) � �D�� � G � � � l ��+� p�x& � ��tc�G>Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�sc�=>Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�rc�u>Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��qc�->Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�pc�u>Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �oc�[>Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�ncu>Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�mce>Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�lce>Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��kg�->Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��jg�G>Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�icE>Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�h�1>Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�gg->Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�fg�>Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �eg�7>Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�dgq>Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�cc�>Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�bc� >Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�ag�w>Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��`g�K>Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�_g?>Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�^gU>Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�]gA>Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�\cm>Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191) � �T� � s � b � � � � w�_�X�ff�� Z�| � ��i� >Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�ie>Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�iq>Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�e}>Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�e� >Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�e�>Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e� ek>Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h� eq>Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|� e�>Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n� e}>Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~� i�>Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �e�W>Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�am>Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�]i>Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�aO>Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�aY>Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �a�[>Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�]�>Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��e�#>Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee� ek>Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�ic>Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�~e�g>Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�}c�?>Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�|g�>Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��{c�?>Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�zgK>Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�yc�Y>Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�xg]>Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�wg%>Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�vg;>Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�ucS>Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159) � �D � Q � � _ � n � U �z�"��F?#? � I�-g1>Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�,i�[>Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��+i�K>Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��*e�%>Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��)g�G>Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�(c�=>Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�'c>Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �&a�7>Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�%ak>Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�$ag>Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��#�!�>Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �"e�7>Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�!sA>Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ� aG>Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV� aQ>Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q� [M>Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei� gq>Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm� ku>Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�k�>Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�g�c>Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�i[>Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�em>Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�eG>Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��i�M>Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�e�>Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�e�>Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet _ g � B � ! � X � �m�w��.�T�g��} � � _ H�Ja5>Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�I_E>Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�H_�!>Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�G[[>Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�F[�>Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�E[;>Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �Di�>Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�Ci5>Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Bi]>Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Ai�'>Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �@i�/>Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�?e3>Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�>eM>Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�=e3>Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �<e�_>Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�;e� >Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�:e�>Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�9e3>Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�8e�S>Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��7e�I>Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�6a�k>Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�5gA>Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�4e�>Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��3a�%>Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��2� �>Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�1[e>Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�0[�+>Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�/[�m>Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�.[�>Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms ���4 � � > � � � 2 � Q�|7������N��j� � �i�+�>Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�hgy>Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�ge=>Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�fe�a>Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�ee>Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�de3>Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�cc� >Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�bak>Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�aa5>Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��`e�'>Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�_a� >Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �^a�[>Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�]a}>Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�\a�W>Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�[a5>Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�Z[/>Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�Yg5>Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��Xe�%>Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�We� >Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�Vaq>Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�UaU>Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�Ta�>Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�Sa5>Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�R[w>Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�Qg� >Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��Pe�S>Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�Oc[>Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�Nc5>Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�Ma� >Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��La�Q>Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�Ka{>Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDB [ #�w � > � u � o � x & x�d �;�n�p"�!� � [ V�[W>Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �[�A>Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�gS>Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��g�'>Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�g�>Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�g5>Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�eW>Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �e�W>Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[� eW>Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�ey>Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�~[q>Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�}[y>Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�|[W>Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�{[�u>Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�zg�>Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�yg�e>Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�xg�q>Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�waC>Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��va�%>Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�ua�>Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�ta=>Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�saW>Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�raU>Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�qaU>Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�pY�>Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�o[m>Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�ng{>Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�mga>Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�lgU>Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�kg5>Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�j[�[>Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings �� | ! � � � G�[�9��D�x�� f � � �&m�/>Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�%g� >Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�$gO>Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�#g�>Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�"i�>Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�!cY>Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid�� i�!>Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u� a� >Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ� aG>Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3� g�>Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g� a�q>Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�g?>Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��[�3>Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�[G>Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�[5>Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��[�W>Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�c?>Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�g�9>Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �g� >Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�gi>Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�g� >Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�a5>Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���%�>Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�s}>Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�aU>Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)�� [�/>Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy� [�>Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l� [�>Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it�� [�M>Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y� [�>Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0) � . � � � � s �����a}�B��;�� � �Y�@g�O>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�?e?>Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�>gi>Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�=c3>Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�<cq>Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�;e?>Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�:a� >Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�9a�>Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�8a�c>Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��7a�'>Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�6a�U>Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�5aM>Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�4a�>Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�3ai>Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��2a�?>Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�1g�>Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�0gs>Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�/g�>Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�.g�O>Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�-g=>Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �,g�7>Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�+ae>Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �*a�]>Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�)m_>Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��(m�9>Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�'m�3>Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) I �t � � � � � s �o�i �L�M�5��G � I Z�\oK>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �[o�O>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�Zo�o>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�Yo�m>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�Xg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�Wg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�Vg�+>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�UgM>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�Tg�_>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�Sg�w>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�RgW>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�Qg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�Pg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�Og3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�Ngq>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�Mg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�Lg3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�Kgm>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��Jg�%>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�Ig�w>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�Hg� >Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�Ggk>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�Fg�o>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��Eg�!>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�Dk3>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�CgI>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Bg�7>Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Ag� >Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �r � t � u � 1 � C � d���w&�(�:�)�>���� � �b�|u�S>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�{o[>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�zo�s>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�yo3>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�xo;>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�woi>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�vo� >Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�uoo>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �to�Q>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�so�>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�roi>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��qo� >Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�puu>Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�oo3>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�no[>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�mo�>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�loU>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�kog>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�joa>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�io>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�ho� >Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�gos>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�fou>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�eoW>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�doo>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�coy>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��bo�#>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��ao�>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�`o�>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �_o�S>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��^o� >Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�]oW>Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) � k� � * � M � s � � .��~��Y�l�*� � � �{�#>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�wU>Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�wu>Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�{�{>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�{W>Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!>Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�wC>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�w�c>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�w�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�wq>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�w}>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�� }�>Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*� s�e>Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr� ws>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m� wi>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|� w�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�wm>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�wg>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�so>Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�w[>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�u3>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��u�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�uw>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�uU>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}� u� >Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�u�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�~u[>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��}u�1>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package � � � � $ � ! � b � ���=�{>��}�=�U��7�� � �>�;O�1?Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�:U]?Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�9U5?Bill Nottingham <notting@redhat.com>7��@- initscript munging`�8Uq?Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�7G�?Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�6UW?Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �5G�w?Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�4U9?Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�3Gq?Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�2M�w?Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�1U�?Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��0S�;?Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�/S{?Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�.Oa?Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�-S'?Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�,S?Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�+Gk?Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�*G�?Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�)Gk?Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��(G�A?Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�'G3?Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �&O�o?Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�%]�y?Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �$�>Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �#q�>Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �"}�!>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�!}g>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>� }�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l� {c>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p� {k>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # � o*�D � l � O � ] 5 � ��R~ �P��w=��=�l]�J � ��^]�/?Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�]] ?Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �\]�a?Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�[]�?Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�ZM�{?Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�Y]u?Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�X]?Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��W]�I?Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�V]�?Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�U]'?Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�T];?Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�S]?Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�R]!?Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�QM3?Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�PeO?Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�Oek?Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�NY7?Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�MQ�)?Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�L[�I?Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��KU�=?Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�JQ�C?Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�I]-?Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�HQ=?Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�GQ�{?Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�F[W?Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��E[�S?Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�DU_?Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�CK�?Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�B]G?Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�AS}?Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�@]�?Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��?]�Y?Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�>]5?Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�=U5?Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �<S�K?Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. ! �S�E � K p & � _ � mu �n%R��h�_� �c�� u�m�?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�~e??Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�}y?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�|yU?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�{y+?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�zy{?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�yy�?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�xyO?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�wm�Y?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�vy!?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�um?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�toC?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�sm�5?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�r]5?Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�qQE?Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�p]q?Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�o]M?Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�n]�?Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�m]�?Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�l]�?Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�k]�-?Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�j]i?Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�i]k?Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�hY;?Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��g]�Q?Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�f]'?Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�e]�?Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�d]5?Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�c] ?Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�b]g?Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�a]�w?Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�`]A?Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�_]_?Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set { � � 1 � & � y 5 � � B�u���B��?�{ { �|�_� ?Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�_g?Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�]e?Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�MU?Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�]S?Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�]�S?Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�m%?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�E3?Tim Powers <timp@redhat.com>=@- automated rebuild9�E3?Tim Powers <timp@redhat.com><��- automated rebuild�7�m�?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�e??Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�m]?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�m�}?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.�� [�M?Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso� mw?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B� EE?Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9� E3?Tim Powers <timp@redhat.com><<0�- automated rebuildA� m?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�{#?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�yC?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�yM?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�y�S?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��y�'?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�y!?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�y�s?Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�m�e?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I� m�)?Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) . � �,��J � U � K � S � � } .�r$�c�V�"�� �}9��?��|" � � 2�HK ?Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�GeI?Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�FGm?Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�E]+?Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�DK ?Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�C]7?Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�B]C?Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�A]/?Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�@]k?Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�?]+?Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�>e/?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�=cO?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�<eq?Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�;cE?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�:c#?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�9cW?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�8cy?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�7co?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�6ce?Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�5_W?Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�4_=?Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�3_}?Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�2_G?Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�1_=?Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�0_}?Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�/_=?Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�._??Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�-K ?Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�,_??Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�+_�?Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�*_??Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�)_??Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�(_a?Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�']??Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�&]7?Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�%]� ?Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�$]5?Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�#]9?Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�"];?Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�!]i?Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC� ]/?Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C� ]/?Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g� _u?Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/� E ?Tim Powers <timp@redhat.com>>.��- rebuilt\� __?Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�c�?Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � ��I � � 2 � � Y c � & ��~�����$� � �-�ds�k?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�cs� ?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�b{�[?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�a{�?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�`{W?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�_s�c?Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��^Q�U?Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �]Q�m?Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�\Qo?Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�[Q�!?Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�ZQ�?Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�YQ�M?Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�XQu?Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��WQ�5?Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�VQ}?Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�UQQ?Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�TQ�}?Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�S_;?Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�R_C?Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�Q_G?Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�PK ?Elliot Lee <sopwith@redhat.com>@��- rebuiltq�O_�?Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�N_C?Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�M_E?Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�L_�?Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�K__?Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��J_�1?Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�I]Y?Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context � L � A � � � � #��k���� � �_�uk�W?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�tk� ?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�ss)?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�rk�i?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�qu�e?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�ps�Y?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�os�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�nq�k?Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�mqW?Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�lqm?Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�kqa?Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�jq�u?Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��ik�=?Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�he�?Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�gk�?Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�fk�1?Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�ek�y?Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � ~ � p | � } m�^��p7�T�O�=� g� qc?Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,� k�q?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_� mW?Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�ok?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��k�A?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�kQ?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��q�?Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�S ?Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �o�S?Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��m�A?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�m�o?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>� m�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�cA?Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�~m� ?Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �}m�/?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�|m�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �{m�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�zm�w?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�ym�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �xm�+?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��wm� ?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�vk�?Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) � � � ( � ��qqL�{�N � � Z�yA?Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�uY?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�{ ?Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�u�G?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�m�?Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�m??Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�m�Y?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�m�?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��m�!?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�m�e?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�m�{?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �m�)?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�m_?Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�k�]?Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\� kS?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i� k�k?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � 1 � = � W � 7 � (�>�o�X�C � ��.q� ?Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�-}�_?Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�,q�U?Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �+q�%?Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��*q� ?Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�)q�u?Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��(q�??Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�'qc?Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�&s� ?Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �%s�)?Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�$s� ?Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�#sO?Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�"s�?Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�!sG?Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config�� s�?Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver�� m�?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l� sk?Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6� m�?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.�� m�9?Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � [�@ � \ � z � ; fn>x}h4�n� � �%�E[�s?Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�D[�E?Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�CcM?Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�Bcy?Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Ac�?Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��@c�C?Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��?c�-?Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�>c?Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�=c�%?Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�<c�y?Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�;c� ?Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�:c�C?Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�9cc?Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�8co?Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�7c�?Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��6c�C?Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�5c�1?Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�4c� ?Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�3c�?Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�2c}?Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�1c�o?Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�0qo?Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�/q�U?Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. � � y . � � �d���I�8�t�R�H � �8�[c�?Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�Zg�?Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�Yc�+?Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�Xeu?Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�Wa�?Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�VeY?Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�Uee?Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�Ta�{?Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�SmU?Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �Ra�a?Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�Q_�i?Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�Pcg?Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�O_{?Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�Nc�w?Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�Mc�?Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��L_�1?Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�Kc�?Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�J_�K?Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�I_E?Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�H[�7?Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��G[�5?Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�F[�?Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist � E� y � < � j k � Q�c�����>���^��* � � �yc�[?Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�xcu?Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�wce?Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�vce?Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��ug�-?Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��tg�G?Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�scE?Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�r�1?Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�qg-?Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�pg�?Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �og�7?Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�ngq?Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�mc�?Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�lc� ?Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�kg�w?Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��jg�K?Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�ig??Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�hgU?Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�ggA?Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�fcm?Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��eg�M?Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�dcc?Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�ccQ?Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�bc� ?Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��ag�9?Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�`c�o?Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��_g�=?Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�^g�i?Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �]g�1?Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�\g� ?Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) H R� Z q � =�Q� X�����3�i � H ~�i�?Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �e�W?Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�am?Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�]i?Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�aO?Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�aY?Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� � a�[?Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y� ]�?Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces�� e�#?Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee� ek?Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c� ic?Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�e�g?Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�c�??Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�g�?Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��c�??Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�gK?Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�c�Y?Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�g]?Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�g%?Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN� g;?Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�cS?Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��~c�G?Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�}c�=?Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�|c�u?Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��{c�-?Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�zc�u?Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 i ��$ � F � � > � {�_ �>�&�f �_�2�h � i n�1c?Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �0a�7?Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�/ak?Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�.ag?Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��-�!�?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �,e�7?Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�+sA?Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�*aG?Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�)aQ?Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�([M?Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�'gq?Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�&ku?Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�%k�?Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�$g�c?Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�#i[?Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�"em?Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�!eG?Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch�� i�M?Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|� e�?Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9� e�?Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet�� i� ?Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d� ie?Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�iq?Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�e}?Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�e� ?Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�e�?Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�ek?Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�eq?Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�e�?Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�e}?Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter) � .� � r � B O ����c���Y��;��p$ � � �Ji�/?Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�Ie3?Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�HeM?Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Ge3?Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �Fe�_?Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�Ee� ?Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�De�?Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�Ce3?Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�Be�S?Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��Ae�I?Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�@a�k?Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�?gA?Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�>e�?Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��=a�%?Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��<� �?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�;[e?Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�:[�+?Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�9[�m?Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�8[�?Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�7g1?Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�6i�[?Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��5i�K?Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��4e�%?Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��3g�G?Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�2c�=?Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u�ia� ?Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �ha�[?Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�ga}?Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�fa�W?Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�ea5?Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�d[/?Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�cg5?Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��be�%?Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�ae� ?Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�`aq?Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�_aU?Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�^a�?Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�]a5?Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�\[w?Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�[g� ?Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��Ze�S?Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�Yc[?Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�Xc5?Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�Wa� ?Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��Va�Q?Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�Ua{?Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�Ta5?Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�S_E?Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�R_�!?Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�Q[[?Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�P[�?Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�O[;?Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �Ni�?Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�Mi5?Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Li]?Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Ki�'?Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l� ey?Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�[q?Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�[y?Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�[W?Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�[�u?Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�g�?Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�g�e?Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�g�q?Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�aC?Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741�� a�%?Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�a�?Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�~a=?Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�}aW?Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�|aU?Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�{aU?Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�zY�?Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�y[m?Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�xg{?Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�wga?Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�vgU?Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�ug5?Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�t[�[?Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �s�+�?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�rgy?Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�qe=?Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�pe�a?Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�oe?Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�ne3?Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�mc� ?Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�lak?Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�ka5?Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��je�'?Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�(aG?Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�'g�?Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�&a�q?Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�%g??Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��$[�3?Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�#[G?Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�"[5?Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��![�W?Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN� c??Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N� g�9?Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� � g� ?Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e� gi?Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6� g� ?Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�a5?Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���%�?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�s}?Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�aU?Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��[�/?Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�[�?Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�[�?Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��[�M?Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�[�?Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�[W?Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �[�A?Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�gS?Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��g�'?Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�g�?Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K� g5?Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[� eW?Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� � e�W?Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[� eW?Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~�Da� ?Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�Ca�?Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�Ba�c?Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��Aa�'?Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�@a�U?Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�?aM?Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�>a�?Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�=ai?Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��<a�??Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�;g�?Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�:gs?Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�9g�?Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�8g�O?Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�7g=?Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �6g�7?Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�5ae?Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �4a�]?Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�3m_?Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��2m�9?Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�1m�3?Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �0m�/?Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�/g� ?Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�.gO?Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�-g�?Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�,i�?Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�+cY?Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��*i�!?Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�)a� ?Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�_gM?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�^g�_?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�]g�w?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�\gW?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�[g3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�Zg3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�Yg3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�Xgq?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�Wg3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�Vg3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�Ugm?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��Tg�%?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�Sg�w?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�Rg� ?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�Qgk?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�Pg�o?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��Og�!?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�Nk3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�MgI?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Lg�7?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Kg� ?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�Jg�O?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�Ie??Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�Hgi?Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Gc3?Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�Fcq?Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�Ee??Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � �~o�Q?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�}o�?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�|oi?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��{o� ?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�zuu?Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�yo3?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�xo[?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�wo�?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�voU?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�uog?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�toa?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�so?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�ro� ?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�qos?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�pou?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�ooW?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�noo?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�moy?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��lo�#?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��ko�?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�jo�?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �io�S?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��ho� ?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�goW?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�foK?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �eo�O?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�do�o?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�co�m?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�bg3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�ag3?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�`g�+?Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � � {�!?Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z� wC?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+� w�c?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�w�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�wq?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�w}?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��}�?Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�s�e?Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�ws?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�wi?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�w�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�wm?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�wg?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�so?Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�w[?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�u3?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471�� u�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s� uw?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b� uU?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}� u� ?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){� u�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�u[?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��u�1?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�u�S?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�o[?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�o�s?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�o3?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�o;?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�oi?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|� o� ?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�oo?Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) � ��$ � 7 � � = � � C�@�.({���V��W�� � v�<U�@Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��;S�;@Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�:S{@Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�9Oa@Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�8S'@Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�7S@Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�6Gk@Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�5G�@Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�4Gk@Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��3G�A@Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�2G3@Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �1O�o@Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�0]�y@Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>��/� �i?Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �.�?Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �-q�?Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �,}�!?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�+}g?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��*}�9?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�)}�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��({�7?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�'{c?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�&{k?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �%{�#?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��${�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��#{�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�"wU?Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�!wu?Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y� {�{?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f� {W?Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers " � �y � � � u Z � � ; � .�t���H7��Z�P � � 7�^]@Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]]!@Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�\M3@Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�[eO@Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�Zek@Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�YY7@Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�XQ�)@Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�W[�I@Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��VU�=@Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�UQ�C@Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�T]-@Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�SQ=@Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�RQ�{@Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�Q[W@Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��P[�S@Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�OU_@Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�NK�@Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�M]G@Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�LS}@Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�K]�@Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��J]�Y@Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�I]5@Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�HU5@Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �GS�K@Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�FO�1@Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�EU]@Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�DU5@Bill Nottingham <notting@redhat.com>7��@- initscript munging`�CUq@Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�BG�@Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�AUW@Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �@G�w@Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�?U9@Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�>Gq@Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�=M�w@Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # � �r k/ � � � G � � � � N �P�m ��e��g �l�@ � � J�y!@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A� m@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�~m�5@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�}]5@Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�|QE@Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�{]q@Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�z]M@Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�y]�@Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�x]�@Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�w]�@Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�v]�-@Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�u]i@Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�t]k@Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�sY;@Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��r]�Q@Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�q]'@Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�p]�@Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�o]5@Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�n] @Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�m]g@Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�l]�w@Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�k]A@Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�j]_@Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��i]�/@Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�h] @Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �g]�a@Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�f]�@Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�eM�{@Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�d]u@Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�c]@Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��b]�I@Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�a]�@Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�`]'@Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�_];@Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � [�. � b � - � h ��x�>�}.��i�a*�s�|@ � F� m%@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759� E3@Tim Powers <timp@redhat.com>=@- automated rebuild9� E3@Tim Powers <timp@redhat.com><��- automated rebuild�7� m�@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�e?@Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�m]@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�m�}@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��[�M@Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�mw@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�EE@Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�E3@Tim Powers <timp@redhat.com><<0�- automated rebuildA�m@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�{#@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�yC@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�yM@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�y�S@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��y�'@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�y!@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t� y�s@Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'� m�e@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I� m�)@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u� m�@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O� e?@Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�y@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�yU@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�y+@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�y{@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�y�@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�yO@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�m�Y@Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z�DcW@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�Ccy@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�Bco@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�Ace@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�@_W@Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�?_=@Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�>_}@Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�=_G@Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�<_=@Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�;_}@Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�:_=@Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�9_?@Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�8K @Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�7_?@Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�6_�@Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�5_?@Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�4_?@Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�3_a@Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�2]?@Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�1]7@Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�0]� @Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�/]5@Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�.]9@Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�-];@Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�,]i@Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�+]/@Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�*]/@Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�)_u@Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�(E @Tim Powers <timp@redhat.com>>.��- rebuilt\�'__@Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�&c�@Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�%_� @Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�$_g@Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�#]e@Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�"MU@Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�!]S@Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V� ]�S@Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i�js�c@Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��iQ�U@Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �hQ�m@Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�gQo@Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�fQ�!@Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�eQ�@Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�dQ�M@Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�cQu@Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��bQ�5@Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�aQ}@Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�`QQ@Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�_Q�}@Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�^_;@Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�]_C@Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�\_G@Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�[K @Elliot Lee <sopwith@redhat.com>@��- rebuiltq�Z_�@Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�Y_C@Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�X_E@Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�W_�@Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�V__@Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��U_�1@Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�T]Y@Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�SK @Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�ReI@Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�QGm@Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�P]+@Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�OK @Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�N]7@Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�M]C@Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�L]/@Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�K]k@Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�J]+@Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�Ie/@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�HcO@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�Geq@Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�FcE@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Ec#@Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+�|u�e@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�{s�Y@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�zs�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�yq�k@Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�xqW@Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�wqm@Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�vqa@Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�uq�u@Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��tk�=@Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�se�@Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�rk�@Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�qk�1@Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�pk�y@Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�os�k@Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�ns� @Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�m{�[@Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�l{�@Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�k{W@Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � �o�S@Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo�� m�A@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l� m�o@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>� m�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO� cA@Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9� m� @Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �m�/@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�m�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �m�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�m�w@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�m�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �m�+@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��m� @Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_� k�W@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� @Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�~s)@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�}k�i@Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�"m�@Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�!m?@Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!� m�Y@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|� m�@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)�� m�!@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'� m�e@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r� m�{@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �m�)@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�m_@Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�k�]@Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�kS@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�k�k@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�qc@Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�k�q@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�mW@Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�ok@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��k�A@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�kQ@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��q�@Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�S @Jesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �6q�%@Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��5q� @Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�4q�u@Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��3q�?@Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�2qc@Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�1s� @Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �0s�)@Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�/s� @Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�.sO@Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�-s�@Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�,sG@Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��+s�@Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��*m�@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�)sk@Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�(m�@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��'m�9@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�&yA@Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�%uY@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�${ @Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�#u�G@Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��Jc�-@Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�Ic@Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Hc�%@Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�Gc�y@Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�Fc� @Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Ec�C@Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�Dcc@Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�Cco@Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�Bc�@Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Ac�C@Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�@c�1@Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�?c� @Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�>c�@Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�=c}@Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�<c�o@Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�;qo@Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�:q�U@Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��9q� @Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�8}�_@Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�7q�U@Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�`ee@Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�_a�{@Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�^mU@Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �]a�a@Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�\_�i@Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�[cg@Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�Z_{@Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�Yc�w@Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�Xc�@Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��W_�1@Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�Vc�@Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�U_�K@Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�T_E@Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�S[�7@Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��R[�5@Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�Q[�@Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�P[�s@Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�O[�E@Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�NcM@Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�Mcy@Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Lc�@Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��Kc�C@Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) A �� � u � � p � 2��}#�$�h � k�>�A A �|�{g�@Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �zg�7@Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�ygq@Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�xc�@Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�wc� @Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�vg�w@Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��ug�K@Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�tg?@Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�sgU@Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�rgA@Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�qcm@Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��pg�M@Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�occ@Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�ncQ@Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�mc� @Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��lg�9@Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�kc�o@Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��jg�=@Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�ig�i@Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �hg�1@Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�gg� @Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�fc�@Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�eg�@Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�dc�+@Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�ceu@Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�ba�@Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�aeY@Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC � �O�b � r � S �[ r�� >�R�Y � � e�ek@Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�ic@Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�e�g@Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�c�?@Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�g�@Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��c�?@Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�gK@Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�c�Y@Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_� g]@Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C� g%@Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN� g;@Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX� cS@Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)�� c�G@Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�c�=@Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�c�u@Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��c�-@Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�c�u@Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �c�[@Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�cu@Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�ce@Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ce@Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283�� g�-@Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G@Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�~cE@Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�}�1@Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�|g-@Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0 x z�^ � F � ? � M M � z A�c�v9� �^��T � x i�2gq@Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�1ku@Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�0k�@Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�/g�c@Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�.i[@Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�-em@Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�,eG@Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��+i�M@Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�*e�@Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�)e�@Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��(i� @Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�'ie@Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�&iq@Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�%e}@Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�$e� @Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�#e�@Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�"ek@Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�!eq@Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|� e�@Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n� e}@Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~� i�@Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� � e�W@Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd� am@Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�]i@Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�aO@Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�aY@Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �a�[@Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�]�@Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��e�#@Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 file �S�� x � � � D =!=��X�3��I� ��Le�I@Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�Ka�k@Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�JgA@Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�Ie�@Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��Ha�%@Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��G� �@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�F[e@Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�E[�+@Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�D[�m@Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�C[�@Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�Bg1@Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�Ai�[@Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��@i�K@Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��?e�%@Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��>g�G@Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�=c�=@Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�<c@Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �;a�7@Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�:ak@Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�9ag@Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��8�!�@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �7e�7@Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�6sA@Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�5aG@Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�4aQ@Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�3[M@Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 release z �V � ` � p � = � P ���f��H�?�| �� � � z X�jaU@Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�ia�@Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�ha5@Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�g[w@Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�fg� @Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��ee�S@Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�dc[@Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�cc5@Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�ba� @Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��aa�Q@Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�`a{@Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�_a5@Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�^_E@Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�]_�!@Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�\[[@Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[[�@Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�Z[;@Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �Yi�@Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�Xi5@Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Wi]@Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Vi�'@Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �Ui�/@Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�Te3@Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�SeM@Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Re3@Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �Qe�_@Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�Pe� @Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�Oe�@Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�Ne3@Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�Me�S@Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed " � � �J � � m � U � � � O�8�w���L�w�J��D�M � O� aC@Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741�� a�%@Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o� a�@Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL� a=@Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�aW@Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�aU@Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�aU@Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�Y�@Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�[m@Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�g{@Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�ga@Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gU@Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK� g5@Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[@Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �~�+�@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�}gy@Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�|e=@Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�{e�a@Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�ze@Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�ye3@Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�xc� @Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�wak@Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�va5@Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��ue�'@Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�ta� @Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �sa�[@Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�ra}@Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�qa�W@Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�pa5@Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�o[/@Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�ng5@Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��me�%@Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�le� @Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�kaq@Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configuration N R � � > � { � H � J�����5�#�8�V�?�: � N � �)g� @Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�(gi@Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�'g� @Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�&a5@Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��%�%�@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�$s}@Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�#aU@Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��"[�/@Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�![�@Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l� [�@Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it�� [�M@Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y� [�@Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V� [W@Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� � [�A@Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�gS@Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��g�'@Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�g�@Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�g5@Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�eW@Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �e�W@Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�eW@Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�ey@Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�[q@Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�[y@Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�[W@Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�[�u@Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�g�@Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�g�e@Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*� g�q@Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patch m .�B � � � � + � _ � z M�w� �����Z � m }�Fg�@Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�Egs@Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�Dg�@Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�Cg�O@Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�Bg=@Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �Ag�7@Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�@ae@Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �?a�]@Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�>m_@Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��=m�9@Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�<m�3@Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �;m�/@Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�:g� @Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�9gO@Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�8g�@Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�7i�@Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�6cY@Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��5i�!@Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�4a� @Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�3aG@Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�2g�@Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�1a�q@Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�0g?@Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��/[�3@Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�.[G@Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�-[5@Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��,[�W@Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�+c?@Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�*g�9@Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings � n �> a � � = � j � M� ��:��8� � ��_g�%@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�^g�w@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�]g� @Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�\gk@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�[g�o@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��Zg�!@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�Yk3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�XgI@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Wg�7@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Vg� @Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�Ug�O@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�Te?@Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�Sgi@Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Rc3@Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�Qcq@Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�Pe?@Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�Oa� @Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�Na�@Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�Ma�c@Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��La�'@Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�Ka�U@Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�JaM@Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�Ia�@Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�Hai@Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��Ga�?@Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version � �I��C � � J � 4 � � u��3�s�H�J�K�y� � t�~o@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�}o� @Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�|os@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�{ou@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�zoW@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�yoo@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�xoy@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��wo�#@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��vo�@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�uo�@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �to�S@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��so� @Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�roW@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�qoK@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �po�O@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�oo�o@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�no�m@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�mg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�lg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�kg�+@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�jgM@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�ig�_@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�hg�w@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�ggW@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�fg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�eg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�dg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�cgq@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�bg3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�ag3@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�`gm@Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827) ! q �-� � Z � \ � n � ] � r ���9�S�n�o�A�` � q m� wi@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|� w�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o� wm@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l� wg@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�so@Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�w[@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�u3@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��u�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�uw@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�uU@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�u� @Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�u�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�u[@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��u�1@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�u�S@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�o[@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�o�s@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�o3@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R� o;@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi� oi@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|� o� @Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l� oo@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� � o�Q@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�o�@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�oi@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��o� @Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�uu@Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�o3@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�o[@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�o�@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oU@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh� og@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa@Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646) ` ��U � V � e � Y � ` c�� y�uk� � �� � ` � �;{�#APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:� �i@Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �9�@Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �8q�@Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �7}�!@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�6}g@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��5}�9@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�4}�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��3{�7@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�2{c@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�1{k@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �0{�#@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��/{�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��.{�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�-wU@Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�,wu@Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�+{�{@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�*{W@Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �){�!@Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�(wC@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�'w�c@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�&w�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�%wq@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��$w�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�#w}@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��"}�@Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�!s�e@Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr� ws@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572) � � � � $ � ! � � C�a�g�d�R�5� � �>�T}�CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��S{�7CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�R{cCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�Q{kCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7�P�'�IBDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �Os�#BStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Ns�BStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �M}�!BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�L}gBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��K}�9BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�J}�BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��I{�7BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�H{cBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�G{kBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �F{�#BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�7�E�'�IADmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �Ds�#AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Cs�AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �B}�!APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�A}gAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��@}�9APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�?}�APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��>{�7APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�={cAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�<{kAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake Q c�` � N � � H�9�#�K�`�f�c � Q � �ns�#EStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ms�EStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �l}�!EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�k}gEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��j}�9EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�i}�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��h{�7EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�g{cEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y�f�[DDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�es� DStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �ds�#DStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��cs�DStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �b}�!DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�a}gDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��`}�9DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�_}�DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��^{�7DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�]{cDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�\{kDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakey�[�[CDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Zs� CStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Ys�#CStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Xs�CStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �W}�!CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�V}gCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��U}�9CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) m �9 � G � 8 � "�J���I�F�4 � m y��[GDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� GStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#GStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�GStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��~}�9GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}}�GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�|�)� FLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�{�[FDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�zs� FStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �ys�#FStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��xs�FStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �w}�!FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�v}gFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��u}�9FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�t}�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��s{�7FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�r{cFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�"�q�)� ELizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�p�[EDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�os� EStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers 2 � � 1 � " � 4����� �� � 2y��[IDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� IStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#IStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�IStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�"�� �'HPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SHLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� HLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[HDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� HStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#HStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�HStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�� �'GPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SGLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� GLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file � � � A � 2 � �D���� ��� � �G�-s� KStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �,s�#KStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��+s�KStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �*}�!KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�)}gKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.�(��CJLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�'� �'JPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�&�)�SJLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�%�)� JLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�$�[JDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�#s� JStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �"s�#JStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��!s�JStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�.� ��CILinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"� � �'IPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SILizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� ILizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file % �^ � w � � ���8Q+y�7�% � �As�#MStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��@s�MStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �?}�!MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-�>��ELJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�=��CLLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�<� �'LPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�;�)�SLLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�:�)� LLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�9�[LDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�8s� LStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �7s�#LStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��6s�LStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �5}�!LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�4}gLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�-�3��EKJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�2��CKLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�1� �'KPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�0�)�SKLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�/�)� KLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�.�[KDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade � �9 R , z � ��q&�����: � �1�T�'�=NDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�S��ENJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�R��CNLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�Q� �'NPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�P�)�SNLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�O�)� NLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�N�[NDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Ms� NStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Ls�#NStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Ks�NStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �J}�!NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�1�I�'�=MDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�H��EMJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�G��CMLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�F� �'MPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�E�)�SMLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�D�)� MLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�C�[MDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Bs� MStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers E {� � ' @ h��X��� � E �.�g��CPLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�f� �'PPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�e�)�SPLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�d�)� PLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�c�[PDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�bs� PStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �as�#PStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��`s�PStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�!�_�'� OJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1�^�'�=ODmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�]��EOJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�\��COLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�[� �'OPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�Z�)�SOLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�Y�)� OLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�X�[ODmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Ws� OStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Vs�#OStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Us�OStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) ! W O� u � ' � d � J � � L�\���\�e �X�=�g � � W O�]GQBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�S}QCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�]�QBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��]�YQBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�]5QBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�U5QBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �S�KQCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�O�1QPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V� U]QBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�U5QBill Nottingham <notting@redhat.com>7��@- initscript munging`�~UqQBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�}G�QJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�|UWQBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �{G�wQJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�zU9QBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�yGqQJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�xM�wQStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�wU�QBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��vS�;QCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�uS{QCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�tOaQPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�sS'QCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�rSQCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�qGkQJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�pG�QJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�oGkQJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��nG�AQJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�mG3QJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �lO�oQManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�k]�yQScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!�j�'� PJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1�i�'�=PDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�h��EPJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9 $ s �5�C � � � 8 d � � 6��]#��#�R�C�0�j ��q( � s ?�,]'QBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�+]�QBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�*]5QBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�)] QBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�(]gQBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�']�wQBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�&]AQBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�%]_QBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��$]�/QBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�#] QBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �"]�aQBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�!]�QBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"� M�{QKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f� ]uQBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9� ]QBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1�� ]�IQBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o� ]�QBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]'QBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�];QBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�]QBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]!QBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�M3QProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�eOQFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�ekQFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�Y7QTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�Q�)QNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�[�IQBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��U�=QBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�Q�CQNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�]-QBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�Q=QNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$� Q�{QNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV� [WQBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)�� [�SQBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW� U_QBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn� K�QElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user. E g �V � d l � e I��_�V��Z��� $ � E ��Jy�'QBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�Iy!QBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�Hy�sQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�Gm�eQBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�Fm�)QBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�Em�QBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�De?QFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�CyQBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�ByUQBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�Ay+QBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�@y{QBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�?y�QBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�>yOQBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�=m�YQBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�<y!QBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�;mQBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�:oCQBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�9m�5QBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�8]5QBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�7QEQNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�6]qQBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�5]MQBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�4]�QBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�3]�QBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�2]�QBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�1]�-QBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�0]iQBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�/]kQBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�.Y;QTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��-]�QQBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890 ! � X��H � � { D � � � � Z �_�JJ�vD��N��T � s�k]� QDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�j]5QDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�i]9QDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�h];QDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�g]iQDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�f]/QDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�e]/QDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�d_uQDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�cE QTim Powers <timp@redhat.com>>.��- rebuilt\�b__QDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�ac�QNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�`_� QDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�__gQDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�^]eQDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�]MUQKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�\]SQKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�[]�SQKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�Zm%QBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�YE3QTim Powers <timp@redhat.com>=@- automated rebuild9�XE3QTim Powers <timp@redhat.com><��- automated rebuild�7�Wm�QBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�Ve?QFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�Um]QBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�Tm�}QBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��S[�MQElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�RmwQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�QEEQTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�PE3QTim Powers <timp@redhat.com><<0�- automated rebuildA�OmQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�N{#QBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�MyCQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�LyMQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�Ky�SQBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. - � �h�j � g 2 � � ' � � � o � 4��@�|2��D��u1��K�f�B�}H � � N�_CQDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�_GQDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K QElliot Lee <sopwith@redhat.com>@��- rebuiltq�_�QDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�_CQDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�_EQDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�_�QDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�__QDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��_�1QDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�]YQDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�K QElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT� eIQFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW� GmQTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A� ]+QDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2� K QElliot Lee <sopwith@redhat.com>@,�@- rebuiltG� ]7QDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�]CQDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�]/QDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�]kQDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�]+QDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�e/QDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�cOQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�eqQFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�cEQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@� c#QDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�cWQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�~cyQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�}coQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�|ceQDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�{_WQDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�z_=QDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�y_}QDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�x_GQDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�w_=QDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�v_}QDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�u_=QDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�t_?QDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�sK QElliot Lee <sopwith@redhat.com>>��@- rebuiltL�r_?QDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�q_�QDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�p_?QDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�o_?QDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�n_aQDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�m]?QDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�l]7QDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup J � �R � j � % � K * ��?x�K����` J ��/k�=QJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�.e�QJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�-k�QJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�,k�1QJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�+k�yQJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�*s�kQJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�)s� QJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�({�[QJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�'{�QJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�&{WQJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�%s�cQJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��$Q�UQJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �#Q�mQJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�"QoQJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�!Q�!QJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q� Q�QJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M� Q�MQJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`� QuQJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec�� Q�5QJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd� Q}QJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQQJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�}QJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_;QDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3 n K � s _ � � ���xp�b n �p�@m�wQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�?m�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �>m�+QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��=m� QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�<k�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�;k�WQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�:k� QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�9s)QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�8k�iQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�7u�eQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�6s�YQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�5s�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�4q�kQJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�3qWQJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�2qmQNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�1qaQJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�0q�uQJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � | � 4 � 0 � � � 6�@�q�Wj �� � �r�Wm�{QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Vm�)QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�Um_QJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�Tk�]QJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�SkSQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�Rk�kQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�QqcQJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�Pk�qQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�OmWQFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�NokQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��Mk�AQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�LkQQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��Kq�QJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�JS QJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �Io�SQJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��Hm�AQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�Gm�oQJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�Fm�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�EcAQTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�Dm� QJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �Cm�/QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�Bm�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �Am�QJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. } U � � � Q ���B���"�< } �;�hs�QMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�gsGQMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��fs�QMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��em�QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�dskQFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�cm�QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��bm�9QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�ayAQMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�`uYQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�_{ QJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�^u�GQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�]m�QJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�\m?QJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�[m�YQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Zm�QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Ym�!QJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�Xm�eQJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition \ � � � � M ��!| a�}�0�( � \ `�ccQAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�~coQAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�}c�QAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��|c�CQAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�{c�1QAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�zc� QAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�yc�QAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�xc}QAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�wc�oQAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�vqoQMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�uq�UQMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��tq� QMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�s}�_QMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�rq�UQMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �qq�%QMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��pq� QMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�oq�uQMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��nq�?QMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�mqcQMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�ls� QMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �ks�)QMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�js� QMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�isOQMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage K +3 = � B -��3a�;1���I � K q�c�QAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��_�1QAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�c�QAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�_�KQAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�_EQAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�[�7QAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init�� [�5QAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y� [�QAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%� [�sQAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N� [�EQAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U� cMQAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�cyQAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�c�QAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��c�CQAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��c�-QAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�cQAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�c�%QAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�c�yQAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�c� QAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q� c�CQAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0) J �d � Y � U � @ � , ����>�r�5�c d � � J [�.gUQAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�-gAQAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�,cmQAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��+g�MQAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�*ccQAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�)cQQAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�(c� QAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��'g�9QAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�&c�oQAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��%g�=QAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�$g�iQAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �#g�1QAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�"g� QAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�!c�QAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=� g�QAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E� c�+QAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj� euQAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1� a�QAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\� eYQAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�eeQAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{QAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mUQWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�aQAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�_�iQAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cgQAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�_{QAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�c�wQAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful) U �a � 4 � 7 7 � � 2 � �E�8� �@�N � � U _�Hg]QAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�Gg%QAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�Fg;QAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�EcSQAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��Dc�GQAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�Cc�=QAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�Bc�uQAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��Ac�-QAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�@c�uQAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �?c�[QAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�>cuQAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�=ceQAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�<ceQAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��;g�-QAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��:g�GQAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�9cEQAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�8�1QRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�7g-QAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�6g�QAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �5g�7QAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�4gqQAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�3c�QAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�2c� QAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�1g�wQAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��0g�KQAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�/g?QAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS � �4 � � ; � m � k � n �L�+��O�q�=�i� � �9�de�QAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��ci� QAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�bieQAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�aiqQAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�`e}QAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�_e� QAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�^e�QAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�]ekQAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�\eqQAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�[e�QAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Ze}QAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Yi�QAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Xe�WQAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�WamQAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�V]iQAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�UaOQAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�TaYQAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �Sa�[QAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�R]�QAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��Qe�#QAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�PekQAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�OicQAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�Ne�gQAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�Mc�?QAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�Lg�QAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��Kc�?QAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�JgKQAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�Ic�YQAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch � ���% � � � ? � � > � T�S�_� �|`|0= � �"�[�mQAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�~[�QAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�}g1QAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�|i�[QMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��{i�KQMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��ze�%QAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��yg�GQAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�xc�=QAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�wcQAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �va�7QAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�uakQAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�tagQAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��s�!�QFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �re�7QMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�qsAQCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�paGQAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�oaQQAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�n[MQAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�mgqQAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�lkuQMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�kk�QAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�jg�cQAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�ii[QAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�hemQAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�geGQAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��fi�MQAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�ee�QAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD x ;�? � E � I � R � l �{�c ��bq�C�� � x t� a� QAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)�� a�QQAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{QAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5QAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_EQJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�!QJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�[[QAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�QAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�[;QAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �i�QAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�i5QAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�i]QAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��i�'QAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �i�/QAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�e3QAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�eMQAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI� e3QAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� � e�_QAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� e� QAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq� e�QAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I� e3QAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�e�SQAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��e�IQAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�a�kQAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�gAQTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�e�QMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��a�%QAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��� �QFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�[eQAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A� [�+QAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �U7 � U � I � J � � l� 4�M���)��\ � � a�=gaQAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�<gUQAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�;g5QAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�:[�[QAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �9�+�QFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�8gyQAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�7e=QAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�6e�aQAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�5eQAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�4e3QAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�3c� QAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�2akQAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�1a5QAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��0e�'QJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�/a� QAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �.a�[QAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�-a}QAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�,a�WQAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�+a5QAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�*[/QAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�)g5QAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��(e�%QAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�'e� QAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�&aqQAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�%aUQAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�$a�QAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�#a5QAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�"[wQAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�!g� QAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch�� e�SQAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\� c[QAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI� c5QAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2 K �+�b � \ � e e ��Q��(�[�]���H�6 � K y�\[�QAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�[[�QAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��Z[�MQAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�Y[�QAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�X[WQAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �W[�AQAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�VgSQAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��Ug�'QAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�Tg�QAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�Sg5QAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�ReWQAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �Qe�WQAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�PeWQAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�OeyQAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�N[qQAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�M[yQAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�L[WQAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�K[�uQAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�Jg�QAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�Ig�eQAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�Hg�qQAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�GaCQAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��Fa�%QAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�Ea�QAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�Da=QAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�CaWQAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�BaUQAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�AaUQAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�@Y�QDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�?[mQAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�>g{QAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver) � y � � � D � X � 6��A�u��c��+ � c�ym_QTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��xm�9QTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�wm�3QTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �vm�/QTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�ug� QAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�tgOQAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�sg�QAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�ri�QTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�qcYQAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��pi�!QTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�oa� QAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�naGQAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�mg�QTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�la�qQAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�kg?QTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��j[�3QAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�i[GQAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�h[5QAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��g[�WQAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�fc?QAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�eg�9QTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �dg� QTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�cgiQTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�bg� QTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�aa5QAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��`�%�QFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�_s}QVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�^aUQAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��][�/QAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch merged � _�k < � S � A � h 4���=�� ��ve � L�k3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�gIQTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �g�7QTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�g� QTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�g�OQTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�e?QDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�giQHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H� c3QTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g� cqQTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O� e?QDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~� a� QTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6� a�QTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�a�cQTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��a�'QTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�a�UQTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�aMQTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�a�QTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�aiQTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��a�?QTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�g�QTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj� gsQTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�g�QTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�~g�OQTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�}g=QTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �|g�7QTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�{aeQTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �za�]QTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20 u �M � . � < � � 6 � � O����h+z�|� � u v�0o�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �/o�SQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��.o� QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�-oWQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�,oKQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �+o�OQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�*o�oQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�)o�mQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�(g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�'g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�&g�+QTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�%gMQTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�$g�_QTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�#g�wQTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�"gWQTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�!g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J� g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J� g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i� gqQTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J� g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J� g3QTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gmQTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��g�%QTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�wQTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� QTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�gkQTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�oQTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��g�!QTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066) � {�| � 8 � J � k � � ~ -�/�A�0�E����� �& � }�Pu� QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�Ou�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�Nu[QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��Mu�1QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�Lu�SQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�Ko[QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�Jo�sQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�Io3QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�Ho;QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�GoiQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�Fo� QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�EooQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �Do�QQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�Co�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�BoiQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��Ao� QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�@uuQMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�?o3QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�>o[QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�=o�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�<oUQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�;ogQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�:oaQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�9oQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�8o� QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�7osQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�6ouQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�5oWQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�4ooQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�3oyQPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��2o�#QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��1o�QPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315) G �%�H � n � � � ) { � y��T�g��%��� G �>�o}�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��n{�7QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�m{cQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�l{kQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �k{�#QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��j{�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��i{�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�hwUQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�gwuQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�f{�{QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�e{WQArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �d{�!QArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�cwCQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�bw�cQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�aw�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�`wqQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��_w�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�^w}QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��]}�QMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�\s�eQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�[wsQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�ZwiQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Yw�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�XwmQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�WwgQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�VsoQPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�Uw[QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�Tu3QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��Su�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�RuwQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�QuUQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661) " � c�` � N � � = � | # � } %�5��|5�>�v1��@�Z � � e�S}RCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�]�RBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��]�YRBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�]5RBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B� U5RBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� � S�KRCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>� O�1RPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V� U]RBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB� U5RBill Nottingham <notting@redhat.com>7��@- initscript munging`�UqRBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�G�RJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�UWRBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �G�wRJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�U9RBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�GqRJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�M�wRStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�U�RBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs�� S�;RCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�S{RCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�~OaRPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�}S'RCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�|SRCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�{GkRJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�zG�RJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�yGkRJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��xG�ARJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�wG3RJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �vO�oRManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�u]�yRScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �t�QLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �sq�QStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �r}�!QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�q}gQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��p}�9QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) $ c �=�J � � � = q � � L��J ��C�< �����k�] � c p�5]�RBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�4]5RBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�3] RBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�2]gRBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�1]�wRBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�0]ARBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�/]_RBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��.]�/RBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�-] RBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �,]�aRBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�+]�RBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�*M�{RKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�)]uRBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�(]RBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��']�IRBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�&]�RBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�%]'RBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�$];RBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�#]RBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�"]!RBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�!M3RProspector <bugzilla@redhat.com>9l]�- automatic rebuildW� eORFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee� ekRFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE� Y7RTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{� Q�)RNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P� [�IRBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��U�=RBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�Q�CRNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�]-RBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�Q=RNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�Q�{RNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�[WRBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��[�SRBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�U_RBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�K�RElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�]GRBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021) � �%�w M � " * � n # � �j xK��J��� � � J�Sy!RBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�Ry�sRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�Qm�eRBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�Pm�)RBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�Om�RBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�Ne?RFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�MyRBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�LyURBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�Ky+RBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�Jy{RBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�Iy�RBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�HyORBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�Gm�YRBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�Fy!RBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�EmRBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�DoCRBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�Cm�5RBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�B]5RBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�AQERNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�@]qRBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�?]MRBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�>]�RBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�=]�RBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�<]�RBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�;]�-RBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�:]iRBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�9]kRBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�8Y;RTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��7]�QRBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�6]'RBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 final ! y n�c � r 6 � � � M � @ �%�|��C��H�Y � y F�t]5RDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�s]9RDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�r];RDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�q]iRDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�p]/RDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�o]/RDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�n_uRDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�mE RTim Powers <timp@redhat.com>>.��- rebuilt\�l__RDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�kc�RNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�j_� RDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�i_gRDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�h]eRDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�gMURKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�f]SRKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�e]�SRKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�dm%RBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�cE3RTim Powers <timp@redhat.com>=@- automated rebuild9�bE3RTim Powers <timp@redhat.com><��- automated rebuild�7�am�RBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�`e?RFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�_m]RBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�^m�}RBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��][�MRElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�\mwRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�[EERTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�ZE3RTim Powers <timp@redhat.com><<0�- automated rebuildA�YmRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�X{#RBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�WyCRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�VyMRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�Uy�SRBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��Ty�'RBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257) - �@��C � @ � � m � c � T � � ,�a �_�x�~4��a �z�� �{ � P�!_GRDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2� K RElliot Lee <sopwith@redhat.com>@��- rebuiltq� _�RDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN� _CRDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO� _ERDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp� _�RDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�__RDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��_�1RDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�]YRDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�K RElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�eIRFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�GmRTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�]+RDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�K RElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�]7RDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�]CRDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�]/RDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�]kRDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�]+RDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�e/RDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV� cORDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh� eqRFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ� cERDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@� c#RDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ� cWRDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�cyRDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�coRDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�ceRDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�_WRDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�_=RDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�_}RDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�_GRDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�_=RDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk� _}RDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�_=RDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�~_?RDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�}K RElliot Lee <sopwith@redhat.com>>��@- rebuiltL�|_?RDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�{_�RDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�z_?RDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�y_?RDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�x_aRDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�w]?RDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�v]7RDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�u]� RDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threads �b�h | H � Z � � DW�'z�I�E� x�8e�RJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�7k�RJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�6k�1RJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�5k�yRJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�4s�kRJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�3s� RJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�2{�[RJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�1{�RJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�0{WRJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�/s�cRJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��.Q�URJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �-Q�mRJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�,QoRJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�+Q�!RJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�*Q�RJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�)Q�MRJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�(QuRJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��'Q�5RJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�&Q}RJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�%QQRJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�$Q�}RJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�#_;RDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�"_CRDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps L � 5 � ] � I � �� ���bZ � L }�Im�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �Hm�+RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��Gm� RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�Fk�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�Ek�WRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�Dk� RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�Cs)RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�Bk�iRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�Au�eRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�@s�YRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�?s�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�>q�kRJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�=qWRJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�<qmRNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�;qaRJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�:q�uRJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��9k�=RJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � @ � , < � �B�L�}�cv�� � � �`m�)RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�_m_RJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�^k�]RJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�]kSRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�\k�kRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�[qcRJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�Zk�qRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�YmWRFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�XokRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��Wk�ARJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�VkQRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��Uq�RJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�TS RJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �So�SRJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��Rm�ARJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�Qm�oRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�Pm�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�OcARTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�Nm� RJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �Mm�/RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�Lm�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �Km�RJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�Jm�wRJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled F _ � � � [ � �L�� �, � F Z�qsGRMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��ps�RMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��om�RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�nskRFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�mm�RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��lm�9RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�kyARMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�juYRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�i{ RJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�hu�GRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�gm�RJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�fm?RJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�em�YRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�dm�RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��cm�!RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�bm�eRJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�am�{RJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc i A�a � Q � M � \�b�M�2�=q � i p�c�RAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��c�CRAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�c�1RAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�c� RAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�c�RAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�c}RAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�c�oRAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m� qoRMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�q�URMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��~q� RMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�}}�_RMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�|q�URMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �{q�%RMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��zq� RMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�yq�uRMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��xq�?RMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�wqcRMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�vs� RMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �us�)RMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�ts� RMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�ssORMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�rs�RMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context } �4_ g 7 q v a-�g��oe� � } q�c�RAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�_�KRAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�_ERAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�[�7RAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��[�5RAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�[�RAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�[�sRAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�[�ERAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�cMRAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�cyRAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�c�RAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��c�CRAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��c�-RAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�cRAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B� c�%RAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,� c�yRAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t� c� RAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q� c�CRAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`� ccRAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�coRAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995) f v � f [ � W � B � .����@�t�7�e f ��5g�MRAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�4ccRAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�3cQRAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�2c� RAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��1g�9RAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�0c�oRAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��/g�=RAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�.g�iRAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �-g�1RAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�,g� RAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�+c�RAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�*g�RAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�)c�+RAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�(euRAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�'a�RAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�&eYRAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�%eeRAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�$a�{RAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�#mURWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �"a�aRAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�!_�iRAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b� cgRAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj� _{RAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+� c�wRAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q� c�RAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)�� _�1RAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856) � �D�� � G � � � l ��+� p�x& � ��Nc�GRAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�Mc�=RAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�Lc�uRAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��Kc�-RAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�Jc�uRAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �Ic�[RAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�HcuRAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�GceRAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�FceRAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��Eg�-RAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��Dg�GRAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�CcERAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�B�1RRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�Ag-RAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�@g�RAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �?g�7RAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�>gqRAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�=c�RAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�<c� RAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�;g�wRAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��:g�KRAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�9g?RAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�8gURAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�7gARAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�6cmRAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191) � �T� � s � b � � � � w�_�X�ff�� Z�| � ��mi� RAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�lieRAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�kiqRAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�je}RAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�ie� RAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�he�RAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�gekRAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�feqRAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�ee�RAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�de}RAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�ci�RAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �be�WRAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�aamRAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�`]iRAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�_aORAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�^aYRAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �]a�[RAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�\]�RAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��[e�#RAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�ZekRAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�YicRAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�Xe�gRAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�Wc�?RAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�Vg�RAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��Uc�?RAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�TgKRAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�Sc�YRAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�Rg]RAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�Qg%RAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�Pg;RAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�OcSRAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159) � �D � Q � � _ � n � U �z�"��F?#? � I�g1RAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�i�[RMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��i�KRMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��e�%RAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��g�GRAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�c�=RAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�cRAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� � a�7RAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�akRAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�~agRAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��}�!�RFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �|e�7RMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�{sARCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�zaGRAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�yaQRAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�x[MRAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�wgqRAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�vkuRMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�uk�RAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�tg�cRAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�si[RAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�remRAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�qeGRAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��pi�MRAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�oe�RAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�ne�RAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet _ g � B � ! � X � �m�w��.�T�g��} � � _ H�$a5RAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�#_ERJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�"_�!RJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�![[RAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m� [�RAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH� [;RAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� � i�RAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL� i5RAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`� i]RAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��i�'RAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �i�/RAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�e3RAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�eMRAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�e3RAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �e�_RAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�e� RAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�e�RAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�e3RAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�e�SRAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��e�IRAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�a�kRAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�gARTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�e�RMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends�� a�%RAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)�� � �RFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]� [eRAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A� [�+RAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"� [�mRAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�[�RAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms ���4 � � > � � � 2 � Q�|7������N��j� � �C�+�RFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�BgyRAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�Ae=RAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�@e�aRAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�?eRAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�>e3RAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�=c� RAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�<akRAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�;a5RAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��:e�'RJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�9a� RAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �8a�[RAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�7a}RAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�6a�WRAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�5a5RAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�4[/RAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�3g5RAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��2e�%RAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�1e� RAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�0aqRAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�/aURAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�.a�RAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�-a5RAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�,[wRAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�+g� RAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��*e�SRAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�)c[RAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�(c5RAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�'a� RAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��&a�QRAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�%a{RAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDB [ #�w � > � u � o � x & x�d �;�n�p"�!� � [ V�b[WRAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �a[�ARAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�`gSRAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��_g�'RAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�^g�RAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�]g5RAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�\eWRAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �[e�WRAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�ZeWRAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�YeyRAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�X[qRAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�W[yRAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�V[WRAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�U[�uRAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�Tg�RAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�Sg�eRAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�Rg�qRAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�QaCRAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��Pa�%RAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�Oa�RAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�Na=RAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�MaWRAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�LaURAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�KaURAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�JY�RDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�I[mRAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�Hg{RAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�GgaRAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�FgURAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�Eg5RAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�D[�[RAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings �� | ! � � � G�[�9��D�x�� f � � � m�/RTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�g� RAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�~gORAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�}g�RAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�|i�RTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�{cYRAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��zi�!RTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�ya� RAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�xaGRAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�wg�RTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�va�qRAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�ug?RTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��t[�3RAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�s[GRAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�r[5RAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��q[�WRAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�pc?RAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�og�9RTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �ng� RTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�mgiRTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�lg� RTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�ka5RAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��j�%�RFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�is}RVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�haURAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��g[�/RAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�f[�RAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�e[�RAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��d[�MRAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�c[�RAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0) � . � � � � s �����a}�B��;�� � �Y�g�ORTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�e?RDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�giRHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�c3RTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�cqRTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�e?RDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�a� RTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�a�RTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�a�cRTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��a�'RTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�a�URTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�aMRTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�a�RTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b� aiRTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)�� a�?RTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}� g�RTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj� gsRTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy� g�RTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�g�ORTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�g=RTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �g�7RTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�aeRTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �a�]RTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�m_RTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��m�9RTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�m�3RTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) I �t � � � � � s �o�i �L�M�5��G � I Z�6oKRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �5o�ORPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�4o�oRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�3o�mRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�2g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�1g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�0g�+RTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�/gMRTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�.g�_RTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�-g�wRTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�,gWRTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�+g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�*g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�)g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�(gqRTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�'g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�&g3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�%gmRTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��$g�%RTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�#g�wRTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�"g� RTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�!gkRTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)� g�oRTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)�� g�!RTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L� k3RTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U� gIRTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� � g�7RTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�g� RTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �r � t � u � 1 � C � d���w&�(�:�)�>���� � �b�Vu�SRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�Uo[RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�To�sRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�So3RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�Ro;RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�QoiRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�Po� RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�OooRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �No�QRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�Mo�RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�LoiRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��Ko� RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�JuuRMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�Io3RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�Ho[RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�Go�RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�FoURPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�EogRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�DoaRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�CoRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�Bo� RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�AosRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�@ouRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�?oWRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�>ooRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�=oyRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��<o�#RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��;o�RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�:o�RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �9o�SRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��8o� RPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�7oWRPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) � k� � * � M � s � � .��~��Y�l�*� � � �u{�#RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��t{�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��s{�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�rwURTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�qwuRTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�p{�{RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�o{WRArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �n{�!RArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�mwCRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�lw�cRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�kw�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�jwqRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��iw�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�hw}RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��g}�RMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�fs�eRTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�ewsRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�dwiRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�cw�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�bwmRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�awgRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�`soRPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�_w[RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�^u3RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��]u�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�\uwRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�[uURPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�Zu� RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�Yu�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�Xu[RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��Wu�1RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package � � � � $ � ! � b � ���=�{>��}�=�U��7�� � �>�O�1SPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�U]SBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�U5SBill Nottingham <notting@redhat.com>7��@- initscript munging`�UqSBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�G�SJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�UWSBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �G�wSJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�U9SBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY� GqSJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`� M�wSStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v� U�SBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs�� S�;SCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd� S{SCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�OaSPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�S'SCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�SSCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�GkSJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�G�SJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�GkSJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��G�ASJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�G3SJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� � O�oSManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�]�ySScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �~�RLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �}q�RStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �|}�!RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�{}gRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��z}�9RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�y}�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��x{�7RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�w{cRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�v{kRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # � o*�D � l � O � ] 5 � ��R~ �P��w=��=�l]�J � ��8]�/SBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�7] SBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �6]�aSBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�5]�SBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�4M�{SKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�3]uSBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�2]SBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��1]�ISBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�0]�SBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�/]'SBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�.];SBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�-]SBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�,]!SBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�+M3SProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�*eOSFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�)ekSFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�(Y7STrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�'Q�)SNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�&[�ISBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��%U�=SBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�$Q�CSNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�#]-SBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�"Q=SNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�!Q�{SNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV� [WSBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)�� [�SSBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW� U_SBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn� K�SElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O� ]GSBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�S}SCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�]�SBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��]�YSBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�]5SBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�U5SBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �S�KSCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. ! �S�E � K p & � _ � mu �n%R��h�_� �c�� u�Ym�SBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�Xe?SFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�WySBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�VyUSBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�Uy+SBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�Ty{SBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�Sy�SBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�RyOSBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�Qm�YSBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�Py!SBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�OmSBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�NoCSBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�Mm�5SBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�L]5SBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�KQESNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�J]qSBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�I]MSBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�H]�SBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�G]�SBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�F]�SBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�E]�-SBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�D]iSBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�C]kSBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�BY;STrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��A]�QSBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�@]'SBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�?]�SBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�>]5SBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�=] SBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�<]gSBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�;]�wSBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�:]ASBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�9]_SBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set { � � 1 � & � y 5 � � B�u���B��?�{ { �|�t_� SDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�s_gSDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�r]eSDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�qMUSKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�p]SSKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�o]�SSKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�nm%SBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�mE3STim Powers <timp@redhat.com>=@- automated rebuild9�lE3STim Powers <timp@redhat.com><��- automated rebuild�7�km�SBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�je?SFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�im]SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�hm�}SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��g[�MSElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�fmwSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�eEESTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�dE3STim Powers <timp@redhat.com><<0�- automated rebuildA�cmSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�b{#SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�ayCSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�`yMSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�_y�SSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��^y�'SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�]y!SBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�\y�sSBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�[m�eSBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�Zm�)SBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) . � �,��J � U � K � S � � } .�r$�c�V�"�� �}9��?��|" � � 2�"K SElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�!eISFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW� GmSTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A� ]+SDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2� K SElliot Lee <sopwith@redhat.com>@,�@- rebuiltG� ]7SDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM� ]CSDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�]/SDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�]kSDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�]+SDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�e/SDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�cOSDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�eqSFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�cESDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�c#SDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�cWSDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�cySDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�coSDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�ceSDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�_WSDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�_=SDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk� _}SDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP� _GSDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K� _=SDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk� _}SDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK� _=SDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�_?SDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�K SElliot Lee <sopwith@redhat.com>>��@- rebuiltL�_?SDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�_�SDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�_?SDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�_?SDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�_aSDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�]?SDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG� ]7SDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�]� SDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�~]5SDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�}]9SDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�|];SDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�{]iSDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�z]/SDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�y]/SDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�x_uSDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�wE STim Powers <timp@redhat.com>>.��- rebuilt\�v__SDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�uc�SNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � ��I � � 2 � � Y c � & ��~�����$� � �-�>s�kSJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�=s� SJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�<{�[SJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�;{�SJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�:{WSJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�9s�cSJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��8Q�USJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �7Q�mSJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�6QoSJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�5Q�!SJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�4Q�SJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�3Q�MSJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�2QuSJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��1Q�5SJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�0Q}SJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�/QQSJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�.Q�}SJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�-_;SDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�,_CSDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�+_GSDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�*K SElliot Lee <sopwith@redhat.com>@��- rebuiltq�)_�SDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�(_CSDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�'_ESDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�&_�SDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�%__SDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��$_�1SDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�#]YSDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context � L � A � � � � #��k���� � �_�Ok�WSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�Nk� SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�Ms)SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�Lk�iSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�Ku�eSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�Js�YSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�Is�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�Hq�kSJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�GqWSJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�FqmSNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�EqaSJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�Dq�uSJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��Ck�=SJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�Be�SJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�Ak�SJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�@k�1SJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�?k�ySJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � ~ � p | � } m�^��p7�T�O�=� g�eqcSJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�dk�qSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�cmWSFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�bokSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��ak�ASJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�`kQSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��_q�SJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�^S SJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �]o�SSJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��\m�ASJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�[m�oSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�Zm�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�YcASTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�Xm� SJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �Wm�/SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�Vm�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �Um�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�Tm�wSJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�Sm�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �Rm�+SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��Qm� SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�Pk�SJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) � � � ( � ��qqL�{�N � � Z�uyASMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�tuYSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�s{ SJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�ru�GSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�qm�SJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�pm?SJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�om�YSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�nm�SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��mm�!SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�lm�eSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�km�{SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �jm�)SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�im_SJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�hk�]SJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�gkSSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�fk�kSJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � 1 � = � W � 7 � (�>�o�X�C � ��q� SMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�}�_SMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�q�USMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �q�%SMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��q� SMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�q�uSMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��q�?SMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�qcSMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}� s� SMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �s�)SMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�~s� SMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�}sOSMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�|s�SMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�{sGSMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��zs�SMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��ym�SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�xskSFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�wm�SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��vm�9SJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � [�@ � \ � z � ; fn>x}h4�n� � �%� [�sSAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N� [�ESAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U� cMSAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk� cySAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�c�SAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��c�CSAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��c�-SAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�cSAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�c�%SAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�c�ySAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�c� SAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�c�CSAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�ccSAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�coSAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�c�SAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��c�CSAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�c�1SAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�c� SAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq� c�SAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm� c}SAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'� c�oSAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m� qoSMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!� q�USMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. � � y . � � �d���I�8�t�R�H � �8�5c�SAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�4g�SAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�3c�+SAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�2euSAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�1a�SAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�0eYSAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�/eeSAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�.a�{SAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�-mUSWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �,a�aSAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�+_�iSAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�*cgSAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�)_{SAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�(c�wSAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�'c�SAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��&_�1SAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�%c�SAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�$_�KSAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�#_ESAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�"[�7SAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��![�5SAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y� [�SAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist � E� y � < � j k � Q�c�����>���^��* � � �Sc�[SAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�RcuSAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�QceSAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�PceSAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��Og�-SAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��Ng�GSAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�McESAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�L�1SRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�Kg-SAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�Jg�SAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �Ig�7SAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�HgqSAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�Gc�SAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�Fc� SAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�Eg�wSAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��Dg�KSAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�Cg?SAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�BgUSAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�AgASAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�@cmSAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��?g�MSAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�>ccSAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�=cQSAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�<c� SAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��;g�9SAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�:c�oSAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��9g�=SAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�8g�iSAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �7g�1SAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�6g� SAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) H R� Z q � =�Q� X�����3�i � H ~�mi�SAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �le�WSAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�kamSAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�j]iSAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�iaOSAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�haYSAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �ga�[SAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�f]�SAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��ee�#SAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�dekSAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�cicSAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�be�gSAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�ac�?SAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�`g�SAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��_c�?SAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�^gKSAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�]c�YSAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�\g]SAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�[g%SAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�Zg;SAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�YcSSAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��Xc�GSAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�Wc�=SAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�Vc�uSAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��Uc�-SAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�Tc�uSAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 i ��$ � F � � > � {�_ �>�&�f �_�2�h � i n� cSAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� � a�7SAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc� akSAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�agSAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���!�SFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �e�7SMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�sASCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�aGSAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�aQSAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�[MSAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�gqSAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm� kuSMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�k�SAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�~g�cSAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�}i[SAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�|emSAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�{eGSAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��zi�MSAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�ye�SAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�xe�SAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��wi� SAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�vieSAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�uiqSAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�te}SAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�se� SAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�re�SAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�qekSAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�peqSAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�oe�SAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�ne}SAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter) � .� � r � B O ����c���Y��;��p$ � � �$i�/SAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�#e3SAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�"eMSAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�!e3SAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� � e�_SAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� e� SAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq� e�SAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I� e3SAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z� e�SSAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��e�ISAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�a�kSAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�gASTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�e�SMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��a�%SAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��� �SFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�[eSAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�[�+SAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�[�mSAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�[�SAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�g1SAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�i�[SMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��i�KSMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��e�%SAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param�� g�GSAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N� c�=SAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u�Ca� SAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �Ba�[SAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�Aa}SAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�@a�WSAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�?a5SAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�>[/SAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�=g5SAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��<e�%SAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�;e� SAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�:aqSAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�9aUSAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�8a�SAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�7a5SAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�6[wSAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�5g� SAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��4e�SSAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�3c[SAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�2c5SAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�1a� SAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��0a�QSAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�/a{SAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�.a5SAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�-_ESJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�,_�!SJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�+[[SAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�*[�SAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�)[;SAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �(i�SAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�'i5SAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�&i]SAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��%i�'SAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l�ceySAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�b[qSAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�a[ySAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�`[WSAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�_[�uSAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�^g�SAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�]g�eSAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�\g�qSAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�[aCSAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��Za�%SAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�Ya�SAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�Xa=SAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�WaWSAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�VaUSAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�UaUSAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�TY�SDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�S[mSAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�Rg{SAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�QgaSAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�PgUSAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�Og5SAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�N[�[SAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �M�+�SFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�LgySAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�Ke=SAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�Je�aSAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�IeSAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�He3SAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�Gc� SAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�FakSAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�Ea5SAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��De�'SJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�aGSAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�g�STomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g� a�qSAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�g?STomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��~[�3SAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�}[GSAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�|[5SAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��{[�WSAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�zc?SAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�yg�9STomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �xg� STomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�wgiSTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�vg� STomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�ua5SAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��t�%�SFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�ss}SVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�raUSAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��q[�/SAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�p[�SAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�o[�SAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��n[�MSAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�m[�SAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�l[WSAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �k[�ASAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�jgSSAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��ig�'SAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�hg�SAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�gg5SAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�feWSAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �ee�WSAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�deWSAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~� a� STomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6� a�STomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`� a�cSTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��a�'STomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�a�USTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�aMSTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�a�STomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�aiSTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��a�?STomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�g�STomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�gsSTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�g�STomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�g�OSTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�g=STomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �g�7STomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�aeSTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �a�]STomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c� m_STomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)�� m�9STomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N� m�3STomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� � m�/STomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x� g� SAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�gOSAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�g�SAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�i�STomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�cYSAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��i�!STomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�a� SAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�9gMSTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�8g�_STomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�7g�wSTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�6gWSTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�5g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�4g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�3g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�2gqSTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�1g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�0g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�/gmSTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��.g�%STomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�-g�wSTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�,g� STomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�+gkSTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�*g�oSTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��)g�!STomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�(k3STomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�'gISTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �&g�7STomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�%g� STomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�$g�OSTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�#e?SDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�"giSHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�!c3STomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g� cqSTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O� e?SDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � �Xo�QSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�Wo�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�VoiSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��Uo� SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�TuuSMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�So3SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�Ro[SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�Qo�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�PoUSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�OogSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�NoaSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�MoSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�Lo� SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�KosSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�JouSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�IoWSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�HooSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�GoySPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��Fo�#SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��Eo�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�Do�SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �Co�SSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��Bo� SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�AoWSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�@oKSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �?o�OSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�>o�oSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�=o�mSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�<g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�;g3STomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�:g�+STomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � �x{�!SArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�wwCSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�vw�cSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�uw�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�twqSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��sw�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�rw}SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��q}�SMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�ps�eSTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�owsSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�nwiSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�mw�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�lwmSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�kwgSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�jsoSPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�iw[SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�hu3SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��gu�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�fuwSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�euUSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�du� SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�cu�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�bu[SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��au�1SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�`u�SSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�_o[SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�^o�sSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�]o3SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�\o;SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�[oiSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�Zo� SPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�YooSPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) � ��$ � 7 � � = � � C�@�.({���V��W�� � v�U�TBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��S�;TCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�S{TCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�OaTPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�S'TCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�STCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�GkTJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�G�TJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�GkTJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.�� G�ATJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:� G3TJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� � O�oTManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)� ]�yTScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�� � �iSPavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��SLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �q�SStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{cSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p� {kSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �{�#SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��~{�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��}{�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�|wUSTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�{wuSTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�z{�{SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�y{WSArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers " � �y � � � u Z � � ; � .�t���H7��Z�P � � 7�8]TBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�7]!TBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�6M3TProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�5eOTFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�4ekTFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�3Y7TTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�2Q�)TNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�1[�ITBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��0U�=TBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�/Q�CTNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�.]-TBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�-Q=TNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�,Q�{TNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�+[WTBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��*[�STBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�)U_TBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�(K�TElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�']GTBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�&S}TCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�%]�TBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��$]�YTBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�#]5TBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�"U5TBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �!S�KTCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>� O�1TPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V� U]TBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB� U5TBill Nottingham <notting@redhat.com>7��@- initscript munging`� UqTBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb� G�TJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�UWTBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �G�wTJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�U9TBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�GqTJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�M�wTStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # � �r k/ � � � G � � � � N �P�m ��e��g �l�@ � � J�[y!TBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�ZmTBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�YoCTBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�Xm�5TBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�W]5TBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�VQETNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�U]qTBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�T]MTBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�S]�TBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�R]�TBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�Q]�TBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�P]�-TBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�O]iTBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�N]kTBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�MY;TTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��L]�QTBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�K]'TBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�J]�TBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�I]5TBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�H] TBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�G]gTBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�F]�wTBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�E]ATBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�D]_TBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��C]�/TBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�B] TBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �A]�aTBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�@]�TBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�?M�{TKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�>]uTBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�=]TBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��<]�ITBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�;]�TBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�:]'TBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�9];TBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � [�. � b � - � h ��x�>�}.��i�a*�s�|@ � F�ym%TBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�xE3TTim Powers <timp@redhat.com>=@- automated rebuild9�wE3TTim Powers <timp@redhat.com><��- automated rebuild�7�vm�TBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�ue?TFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�tm]TBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�sm�}TBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��r[�MTElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�qmwTBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�pEETTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�oE3TTim Powers <timp@redhat.com><<0�- automated rebuildA�nmTBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�m{#TBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�lyCTBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�kyMTBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�jy�STBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��iy�'TBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�hy!TBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�gy�sTBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�fm�eTBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�em�)TBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�dm�TBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�ce?TFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�byTBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�ayUTBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�`y+TBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�_y{TBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�^y�TBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�]yOTBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�\m�YTBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z� cWTDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk� cyTDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf� coTDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�ceTDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�_WTDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�_=TDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�_}TDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�_GTDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�_=TDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�_}TDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�_=TDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�_?TDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�K TElliot Lee <sopwith@redhat.com>>��@- rebuiltL�_?TDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�_�TDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�_?TDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�_?TDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]� _aTDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK� ]?TDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG� ]7TDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups� ]� TDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF� ]5TDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�]9TDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�];TDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�]iTDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�]/TDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�]/TDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�_uTDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�E TTim Powers <timp@redhat.com>>.��- rebuilt\�__TDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer� c�TNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�_� TDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�~_gTDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�}]eTDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�|MUTKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�{]STKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�z]�STKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i�Ds�cTJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��CQ�UTJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �BQ�mTJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�AQoTJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�@Q�!TJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�?Q�TJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�>Q�MTJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�=QuTJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��<Q�5TJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�;Q}TJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�:QQTJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�9Q�}TJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�8_;TDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�7_CTDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�6_GTDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�5K TElliot Lee <sopwith@redhat.com>@��- rebuiltq�4_�TDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�3_CTDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�2_ETDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�1_�TDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�0__TDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��/_�1TDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�.]YTDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�-K TElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�,eITFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�+GmTTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�*]+TDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�)K TElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�(]7TDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�']CTDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�&]/TDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�%]kTDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�$]+TDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�#e/TDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�"cOTDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�!eqTFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ� cETDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@� c#TDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+�Vu�eTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�Us�YTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�Ts�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�Sq�kTJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�RqWTJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�QqmTNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�PqaTJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�Oq�uTJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��Nk�=TJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�Me�TJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�Lk�TJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�Kk�1TJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�Jk�yTJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�Is�kTJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�Hs� TJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�G{�[TJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�F{�TJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�E{WTJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � �ho�STJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��gm�ATJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�fm�oTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�em�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�dcATTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�cm� TJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �bm�/TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�am�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �`m�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�_m�wTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�^m�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �]m�+TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��\m� TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�[k�TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�Zk�WTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�Yk� TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�Xs)TJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�Wk�iTJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�|m�TJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�{m?TJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�zm�YTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�ym�TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��xm�!TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�wm�eTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�vm�{TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �um�)TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�tm_TJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�sk�]TJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�rkSTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�qk�kTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�pqcTJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�ok�qTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�nmWTFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�mokTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��lk�ATJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�kkQTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��jq�TJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�iS TJesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �q�%TMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��q� TMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�q�uTMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.�� q�?TMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g� qcTMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}� s� TMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� � s�)TMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|� s� TMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�sOTMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�s�TMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�sGTMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��s�TMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��m�TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�skTFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�m�TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��m�9TJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ� yATMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�uYTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�~{ TJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�}u�GTJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��$c�-TAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�#cTAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�"c�%TAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�!c�yTAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t� c� TAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q� c�CTAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`� ccTAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf� coTAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p� c�TAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��c�CTAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�c�1TAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�c� TAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�c�TAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�c}TAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�c�oTAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�qoTMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�q�UTMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��q� TMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�}�_TMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�q�UTMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�:eeTAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�9a�{TAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�8mUTWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �7a�aTAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�6_�iTAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�5cgTAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�4_{TAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�3c�wTAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�2c�TAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��1_�1TAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�0c�TAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�/_�KTAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�._ETAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�-[�7TAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��,[�5TAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�+[�TAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�*[�sTAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�)[�ETAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�(cMTAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�'cyTAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�&c�TAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��%c�CTAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) A �� � u � � p � 2��}#�$�h � k�>�A A �|�Ug�TAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �Tg�7TAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�SgqTAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�Rc�TAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�Qc� TAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�Pg�wTAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��Og�KTAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�Ng?TAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�MgUTAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�LgATAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�KcmTAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��Jg�MTAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�IccTAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�HcQTAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�Gc� TAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��Fg�9TAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�Ec�oTAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��Dg�=TAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�Cg�iTAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �Bg�1TAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�Ag� TAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�@c�TAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�?g�TAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�>c�+TAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�=euTAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�<a�TAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�;eYTAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC � �O�b � r � S �[ r�� >�R�Y � � e�oekTAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�nicTAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�me�gTAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�lc�?TAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�kg�TAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��jc�?TAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�igKTAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�hc�YTAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�gg]TAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�fg%TAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�eg;TAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�dcSTAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��cc�GTAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�bc�=TAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�ac�uTAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��`c�-TAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�_c�uTAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �^c�[TAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�]cuTAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�\ceTAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�[ceTAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��Zg�-TAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��Yg�GTAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�XcETAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�W�1TRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�Vg-TAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0 x z�^ � F � ? � M M � z A�c�v9� �^��T � x i� gqTAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm� kuTMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~� k�TAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#� g�cTAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�i[TAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�emTAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�eGTAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��i�MTAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�e�TAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�e�TAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��i� TAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�ieTAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj� iqTAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�e}TAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�~e� TAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�}e�TAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�|ekTAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�{eqTAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�ze�TAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�ye}TAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�xi�TAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �we�WTAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�vamTAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�u]iTAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�taOTAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�saYTAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �ra�[TAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�q]�TAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��pe�#TAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 file �S�� x � � � D =!=��X�3��I� ��&e�ITAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�%a�kTAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�$gATTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�#e�TMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��"a�%TAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��!� �TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]� [eTAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A� [�+TAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"� [�mTAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o� [�TAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI� g1TAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�i�[TMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��i�KTMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��e�%TAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��g�GTAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�c�=TAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�cTAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �a�7TAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�akTAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�agTAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���!�TFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �e�7TMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�sATCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�aGTAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�aQTAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q� [MTAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 release z �V � ` � p � = � P ���f��H�?�| �� � � z X�DaUTAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�Ca�TAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�Ba5TAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�A[wTAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�@g� TAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��?e�STAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�>c[TAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�=c5TAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�<a� TAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��;a�QTAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�:a{TAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�9a5TAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�8_ETJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�7_�!TJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�6[[TAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�5[�TAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�4[;TAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �3i�TAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�2i5TAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�1i]TAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��0i�'TAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �/i�/TAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�.e3TAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�-eMTAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�,e3TAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �+e�_TAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�*e� TAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�)e�TAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�(e3TAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�'e�STAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed " � � �J � � m � U � � � O�8�w���L�w�J��D�M � O�faCTAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��ea�%TAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�da�TAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�ca=TAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�baWTAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�aaUTAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�`aUTAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�_Y�TDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�^[mTAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�]g{TAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�\gaTAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�[gUTAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�Zg5TAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�Y[�[TAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �X�+�TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�WgyTAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�Ve=TAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�Ue�aTAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�TeTAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�Se3TAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�Rc� TAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�QakTAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�Pa5TAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��Oe�'TJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�Na� TAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �Ma�[TAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�La}TAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�Ka�WTAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�Ja5TAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�I[/TAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�Hg5TAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��Ge�%TAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�Fe� TAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�EaqTAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configuration N R � � > � { � H � J�����5�#�8�V�?�: � N � �g� TTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�giTTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�g� TTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH� a5TAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���%�TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�~s}TVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�}aUTAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��|[�/TAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�{[�TAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�z[�TAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��y[�MTAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�x[�TAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�w[WTAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �v[�ATAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�ugSTAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��tg�'TAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�sg�TAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�rg5TAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�qeWTAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �pe�WTAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�oeWTAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�neyTAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�m[qTAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�l[yTAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�k[WTAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�j[�uTAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�ig�TAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�hg�eTAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�gg�qTAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patch m .�B � � � � + � _ � z M�w� �����Z � m }� g�TTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj� gsTTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy� g�TTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y� g�OTTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO� g=TTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �g�7TTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�aeTTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �a�]TTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�m_TTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��m�9TTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�m�3TTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �m�/TTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�g� TAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�gOTAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�g�TAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�i�TTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�cYTAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��i�!TTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�a� TAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ� aGTAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3� g�TTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g� a�qTAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP� g?TTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1�� [�3TAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�[GTAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�[5TAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��[�WTAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�c?TAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�g�9TTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings � n �> a � � = � j � M� ��:��8� � ��9g�%TTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�8g�wTTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�7g� TTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�6gkTTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�5g�oTTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��4g�!TTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�3k3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�2gITTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �1g�7TTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�0g� TTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�/g�OTTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�.e?TDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�-giTHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�,c3TTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�+cqTTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�*e?TDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�)a� TTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�(a�TTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�'a�cTTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��&a�'TTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�%a�UTTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�$aMTTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�#a�TTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�"aiTTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��!a�?TTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version � �I��C � � J � 4 � � u��3�s�H�J�K�y� � t�XoTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�Wo� TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�VosTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�UouTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�ToWTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�SooTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�RoyTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��Qo�#TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��Po�TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�Oo�TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �No�STPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��Mo� TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�LoWTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�KoKTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �Jo�OTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�Io�oTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�Ho�mTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�Gg3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�Fg3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�Eg�+TTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�DgMTTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�Cg�_TTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�Bg�wTTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�AgWTTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�@g3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�?g3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�>g3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�=gqTTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�<g3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�;g3TTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�:gmTTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827) ! q �-� � Z � \ � n � ] � r ���9�S�n�o�A�` � q m�ywiTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�xw�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�wwmTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�vwgTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�usoTPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�tw[TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�su3TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��ru�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�quwTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�puUTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�ou� TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�nu�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�mu[TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��lu�1TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�ku�STPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�jo[TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�io�sTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�ho3TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�go;TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�foiTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�eo� TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�dooTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �co�QTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�bo�TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�aoiTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��`o� TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�_uuTMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�^o3TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�]o[TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�\o�TPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�[oUTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�ZogTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�YoaTPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646) ` ��U � V � e � Y � ` c�� y�uk� � �� � ` � �{�#UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��� �iTPavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��TLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �q�TStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l� {cTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p� {kTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� � {�#TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�wUTTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�wuTTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�{�{TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�{WTArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!TArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�wCTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�w�cTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z� w�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�wqTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��~w�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�}w}TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��|}�TMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�{s�eTTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�zwsTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572) � � � � $ � ! � � C�a�g�d�R�5� � �>�.}�WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��-{�7WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�,{cWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�+{kWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7�*�'�IVDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �)s�#VStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��(s�VStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �'}�!VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�&}gVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��%}�9VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�$}�VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��#{�7VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�"{cVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�!{kVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� � {�#VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�7� �'�IUDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� � s�#UStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�UStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}gUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{cUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{kUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake Q c�` � N � � H�9�#�K�`�f�c � Q � �Hs�#YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Gs�YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �F}�!YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�E}gYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��D}�9YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�C}�YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��B{�7YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�A{cYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y�@�[XDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�?s� XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �>s�#XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��=s�XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �<}�!XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�;}gXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��:}�9XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�9}�XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��8{�7XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�7{cXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�6{kXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakey�5�[WDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�4s� WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �3s�#WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��2s�WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �1}�!WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�0}gWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��/}�9WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) m �9 � G � 8 � "�J���I�F�4 � m y�^�[[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�]s� [Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �\s�#[Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��[s�[Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �Z}�![Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�Y}g[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��X}�9[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�W}�[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�V�)� ZLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�U�[ZDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Ts� ZStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Ss�#ZStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Rs�ZStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �Q}�!ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�P}gZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��O}�9ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�N}�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��M{�7ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�L{cZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�"�K�)� YLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�J�[YDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Is� YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers 2 � � 1 � " � 4����� �� � 2y�s�[]Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�rs� ]Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �qs�#]Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ps�]Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �o}�!]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�n}g]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��m}�9]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�"�l� �'\Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�k�)�S\Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�j�)� \Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�i�[\Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�hs� \Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �gs�#\Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��fs�\Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �e}�!\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�d}g\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��c}�9\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�b}�\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�a� �'[Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�`�)�S[Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�_�)� [Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file � � � A � 2 � �D���� ��� � �G�s� _Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#_Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�_Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.���C^Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'^Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S^Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� ^Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�~�[^Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�}s� ^Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �|s�#^Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��{s�^Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �z}�!^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�y}g^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��x}�9^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�.�w��C]Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�v� �']Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�u�)�S]Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�t�)� ]Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file % �^ � w � � ���8Q+y�7�% � �s�#aStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�aStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-���E`Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.���C`Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'`Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�S`Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� `Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[`Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� `Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#`Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�`Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}g`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�-� ��E_Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.� ��C_Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"� � �'_Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�S_Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"� �)� _Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[_Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade � �9 R , z � ��q&�����: � �1�.�'�=bDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�-��EbJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�,��CbLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�+� �'bPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�*�)�SbLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�)�)� bLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�(�[bDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�'s� bStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �&s�#bStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��%s�bStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �$}�!bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�1�#�'�=aDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�"��EaJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�!��CaLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"� � �'aPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=� �)�SaLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"� �)� aLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey� �[aDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G� s� aStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers E {� � ' @ h��X��� � E �.�A��CdLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�@� �'dPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�?�)�SdLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�>�)� dLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�=�[dDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�<s� dStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �;s�#dStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��:s�dStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�!�9�'� cJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1�8�'�=cDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�7��EcJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�6��CcLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�5� �'cPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�4�)�ScLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�3�)� cLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�2�[cDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�1s� cStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �0s�#cStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��/s�cStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) ! W O� u � ' � d � J � � L�\���\�e �X�=�g � � W O�b]GeBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�aS}eCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�`]�eBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��_]�YeBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�^]5eBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�]U5eBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �\S�KeCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�[O�1ePreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�ZU]eBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�YU5eBill Nottingham <notting@redhat.com>7��@- initscript munging`�XUqeBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�WG�eJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�VUWeBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �UG�weJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�TU9eBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�SGqeJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�RM�weStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�QU�eBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��PS�;eCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�OS{eCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�NOaePreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�MS'eCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�LSeCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�KGkeJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�JG�eJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�IGkeJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��HG�AeJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�GG3eJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �FO�oeManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�E]�yeScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!�D�'� dJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1�C�'�=dDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�B��EdJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9 $ s �5�C � � � 8 d � � 6��]#��#�R�C�0�j ��q( � s ?�]'eBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�]�eBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�]5eBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] eBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]geBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�weBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL� ]AeBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_eBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��~]�/eBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�}] eBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �|]�aeBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�{]�eBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�zM�{eKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�y]ueBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�x]eBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��w]�IeBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�v]�eBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�u]'eBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�t];eBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�s]eBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�r]!eBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�qM3eProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�peOeFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�oekeFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�nY7eTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�mQ�)eNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�l[�IeBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��kU�=eBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�jQ�CeNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�i]-eBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�hQ=eNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�gQ�{eNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�f[WeBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��e[�SeBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�dU_eBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�cK�eElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user. E g �V � d l � e I��_�V��Z��� $ � E ��$y�'eBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�#y!eBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�"y�seBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�!m�eeBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I� m�)eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u� m�eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O� e?eFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey� yeBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d� yUeBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�y+eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�y{eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�y�eBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�yOeBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�m�YeBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�y!eBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�meBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oCeBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5eBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�]5eBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QEeNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�]qeBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]MeBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�]�eBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-� ]�eBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w� ]�eBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C� ]�-eBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`� ]ieBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a� ]keBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;eTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�QeBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890 ! � X��H � � { D � � � � Z �_�JJ�vD��N��T � s�E]� eDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�D]5eDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�C]9eDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�B];eDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�A]ieDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�@]/eDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�?]/eDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�>_ueDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�=E eTim Powers <timp@redhat.com>>.��- rebuilt\�<__eDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�;c�eNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�:_� eDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�9_geDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�8]eeDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�7MUeKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�6]SeKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�5]�SeKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�4m%eBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�3E3eTim Powers <timp@redhat.com>=@- automated rebuild9�2E3eTim Powers <timp@redhat.com><��- automated rebuild�7�1m�eBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�0e?eFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�/m]eBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�.m�}eBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��-[�MeElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�,mweBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�+EEeTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�*E3eTim Powers <timp@redhat.com><<0�- automated rebuildA�)meBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�({#eBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�'yCeBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�&yMeBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�%y�SeBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. - � �h�j � g 2 � � ' � � � o � 4��@�|2��D��u1��K�f�B�}H � � N�r_CeDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�q_GeDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�pK eElliot Lee <sopwith@redhat.com>@��- rebuiltq�o_�eDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�n_CeDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�m_EeDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�l_�eDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�k__eDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��j_�1eDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�i]YeDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�hK eElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�geIeFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�fGmeTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�e]+eDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�dK eElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�c]7eDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�b]CeDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�a]/eDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�`]keDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�_]+eDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�^e/eDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�]cOeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�\eqeFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�[cEeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Zc#eDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�YcWeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�XcyeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�WcoeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�VceeDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�U_WeDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�T_=eDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�S_}eDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�R_GeDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�Q_=eDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�P_}eDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�O_=eDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�N_?eDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�MK eElliot Lee <sopwith@redhat.com>>��@- rebuiltL�L_?eDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�K_�eDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�J_?eDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�I_?eDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�H_aeDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�G]?eDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�F]7eDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup J � �R � j � % � K * ��?x�K����` J �� k�=eJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�e�eJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k�eJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1eJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�yeJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�s�keJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� eJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[eJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{�eJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf� {WeJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�s�ceJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��~Q�UeJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �}Q�meJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�|QoeJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�{Q�!eJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�zQ�eJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�yQ�MeJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�xQueJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��wQ�5eJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�vQ}eJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�uQQeJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�tQ�}eJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�s_;eDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3 n K � s _ � � ���xp�b n �p�m�weJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�m�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �m�+eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��m� eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�k�WeJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s)eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�k�ieJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�eeJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�s�YeJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�q�keJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a� qWeJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l� qmeNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf� qaeJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1� q�ueJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � | � 4 � 0 � � � 6�@�q�Wj �� � �r�1m�{eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �0m�)eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�/m_eJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�.k�]eJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�-kSeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�,k�keJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�+qceJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�*k�qeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�)mWeFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�(okeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��'k�AeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�&kQeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��%q�eJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�$S eJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �#o�SeJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��"m�AeJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�!m�oeJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>� m�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO� cAeTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9� m� eJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� � m�/eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx� m�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �m�eJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. } U � � � Q ���B���"�< } �;�Bs�eMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�AsGeMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��@s�eMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��?m�eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�>skeFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�=m�eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��<m�9eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�;yAeMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�:uYeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�9{ eJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�8u�GeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�7m�eJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�6m?eJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�5m�YeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�4m�eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��3m�!eJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�2m�eeJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition \ � � � � M ��!| a�}�0�( � \ `�YcceAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�XcoeAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�Wc�eAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Vc�CeAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Uc�1eAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Tc� eAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Sc�eAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Rc}eAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Qc�oeAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�PqoeMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Oq�UeMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��Nq� eMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�M}�_eMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Lq�UeMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �Kq�%eMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Jq� eMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Iq�ueMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Hq�?eMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�GqceMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Fs� eMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Es�)eMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Ds� eMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�CsOeMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage K +3 = � B -��3a�;1���I � K q�mc�eAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��l_�1eAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�kc�eAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�j_�KeAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�i_EeAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�h[�7eAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��g[�5eAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�f[�eAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�e[�seAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�d[�EeAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�ccMeAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�bcyeAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�ac�eAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��`c�CeAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��_c�-eAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�^ceAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�]c�%eAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�\c�yeAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�[c� eAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Zc�CeAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0) J �d � Y � U � @ � , ����>�r�5�c d � � J [�gUeAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gAeAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cmeAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��g�MeAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�cceAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQeAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� eAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9eAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'� c�oeAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�=eAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�~g�ieAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �}g�1eAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�|g� eAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�{c�eAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�zg�eAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�yc�+eAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�xeueAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�wa�eAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�veYeAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�ueeeAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�ta�{eAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�smUeWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �ra�aeAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�q_�ieAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�pcgeAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�o_{eAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�nc�weAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful) U �a � 4 � 7 7 � � 2 � �E�8� �@�N � � U _�"g]eAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�!g%eAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN� g;eAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX� cSeAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)�� c�GeAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N� c�=eAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j� c�ueAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��c�-eAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�c�ueAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �c�[eAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�cueAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�ceeAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ceeAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�-eAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�GeAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cEeAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d��1eRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g-eAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�g�eAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �g�7eAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�gqeAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r� c�eAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4� c� eAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-� g�weAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch�� g�KeAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP� g?eAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS � �4 � � ; � m � k � n �L�+��O�q�=�i� � �9�>e�eAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��=i� eAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�<ieeAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�;iqeAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�:e}eAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�9e� eAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�8e�eAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�7ekeAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�6eqeAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�5e�eAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�4e}eAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�3i�eAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �2e�WeAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�1ameAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�0]ieAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�/aOeAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�.aYeAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �-a�[eAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�,]�eAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��+e�#eAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�*ekeAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�)iceAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�(e�geAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�'c�?eAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�&g�eAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��%c�?eAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�$gKeAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�#c�YeAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch � ���% � � � ? � � > � T�S�_� �|`|0= � �"�Y[�meAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�X[�eAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�Wg1eAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�Vi�[eMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��Ui�KeMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Te�%eAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Sg�GeAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�Rc�=eAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�QceAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �Pa�7eAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�OakeAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�NageAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��M�!�eFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �Le�7eMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�KsAeCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�JaGeAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�IaQeAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�H[MeAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�GgqeAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�FkueMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Ek�eAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Dg�ceAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Ci[eAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�BemeAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�AeGeAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��@i�MeAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�?e�eAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD x ;�? � E � I � R � l �{�c ��bq�C�� � x t�wa� eAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��va�QeAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�ua{eAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�ta5eAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�s_EeJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�r_�!eJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�q[[eAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�p[�eAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�o[;eAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �ni�eAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�mi5eAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�li]eAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��ki�'eAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �ji�/eAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�ie3eAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�heMeAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�ge3eAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �fe�_eAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�ee� eAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�de�eAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�ce3eAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�be�SeAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��ae�IeAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�`a�keAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�_gAeTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�^e�eMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��]a�%eAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��\� �eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�[[eeAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�Z[�+eAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �U7 � U � I � J � � l� 4�M���)��\ � � a�gaeAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gUeAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5eAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[eAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��+�eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�gyeAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e=eAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�e�aeAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�eeAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�e3eAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~� c� eAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c� akeAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH� a5eAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3�� e�'eJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu� a� eAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[eAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a}eAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�WeAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5eAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�[/eAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5eAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�%eAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� eAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf� aqeAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�aUeAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�~a�eAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�}a5eAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�|[weAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�{g� eAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��ze�SeAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�yc[eAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�xc5eAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2 K �+�b � \ � e e ��Q��(�[�]���H�6 � K y�6[�eAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�5[�eAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��4[�MeAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�3[�eAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�2[WeAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �1[�AeAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�0gSeAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��/g�'eAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�.g�eAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�-g5eAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�,eWeAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �+e�WeAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�*eWeAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�)eyeAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�([qeAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�'[yeAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�&[WeAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�%[�ueAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�$g�eAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�#g�eeAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�"g�qeAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�!aCeAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741�� a�%eAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o� a�eAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL� a=eAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY� aWeAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX� aUeAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�aUeAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�Y�eDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�[meAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�g{eAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver) � y � � � D � X � 6��A�u��c��+ � c�Sm_eTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��Rm�9eTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�Qm�3eTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �Pm�/eTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Og� eAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�NgOeAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�Mg�eAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�Li�eTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�KcYeAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Ji�!eTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Ia� eAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�HaGeAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Gg�eTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Fa�qeAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Eg?eTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��D[�3eAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�C[GeAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�B[5eAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��A[�WeAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�@c?eAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�?g�9eTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �>g� eTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�=gieTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�<g� eTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�;a5eAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��:�%�eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�9s}eVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�8aUeAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��7[�/eAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch merged � _�k < � S � A � h 4���=�� ��ve � L�nk3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�mgIeTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �lg�7eTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�kg� eTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�jg�OeTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�ie?eDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�hgieHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�gc3eTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�fcqeTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�ee?eDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�da� eTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ca�eTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�ba�ceTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��aa�'eTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�`a�UeTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�_aMeTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�^a�eTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�]aieTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��\a�?eTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�[g�eTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�ZgseTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�Yg�eTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�Xg�OeTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�Wg=eTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �Vg�7eTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�UaeeTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Ta�]eTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20 u �M � . � < � � 6 � � O����h+z�|� � u v� o�ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� � o�SePetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oWePetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�oKePetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�OePetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�o�oePetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�mePetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G� g�+eTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�gMeTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�~g�_eTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�}g�weTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�|gWeTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�{g3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�zg3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�yg3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�xgqeTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�wg3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�vg3eTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�ugmeTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��tg�%eTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�sg�weTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�rg� eTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�qgkeTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�pg�oeTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��og�!eTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066) � {�| � 8 � J � k � � ~ -�/�A�0�E����� �& � }�*u� ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�)u�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�(u[ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��'u�1ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�&u�SePetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�%o[ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�$o�sePetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�#o3ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�"o;ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�!oiePetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|� o� ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l� ooePetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� � o�QePetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� o�ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i� oiePetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��o� ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�uueMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�o3ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�o[ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�o�ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oUePetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�ogePetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oaePetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�oePetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�o� ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�osePetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�ouePetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�oWePetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�ooePetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q� oyePetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)�� o�#ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)�� o�ePetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315) G �%�H � n � � � ) { � y��T�g��%��� G �>�I}�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��H{�7ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�G{cePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�F{kePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �E{�#ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��D{�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��C{�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�BwUeTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�AwueTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�@{�{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�?{WeArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �>{�!eArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�=wCePetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�<w�cePetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�;w�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�:wqePetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��9w�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�8w}ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��7}�eMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�6s�eeTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�5wsePetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�4wiePetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�3w�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�2wmePetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�1wgePetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�0soePavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�/w[ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�.u3ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��-u�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�,uwePetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�+uUePetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661) " � c�` � N � � = � | # � } %�5��|5�>�v1��@�Z � � e�kS}fCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�j]�fBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��i]�YfBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�h]5fBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�gU5fBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �fS�KfCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�eO�1fPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�dU]fBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�cU5fBill Nottingham <notting@redhat.com>7��@- initscript munging`�bUqfBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�aG�fJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�`UWfBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �_G�wfJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�^U9fBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�]GqfJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�\M�wfStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�[U�fBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��ZS�;fCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�YS{fCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�XOafPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�WS'fCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�VSfCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�UGkfJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�TG�fJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�SGkfJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��RG�AfJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�QG3fJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �PO�ofManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�O]�yfScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �N�eLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �Mq�eStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �L}�!ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�K}gePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��J}�9ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) $ c �=�J � � � = q � � L��J ��C�< �����k�] � c p�]�fBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�]5fBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;� ] fBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_� ]gfBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(� ]�wfBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL� ]AfBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[� ]_fBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��]�/fBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] fBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�afBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�]�fBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�M�{fKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]ufBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�]fBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�IfBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o� ]�fBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]'fBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�~];fBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�}]fBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�|]!fBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�{M3fProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�zeOfFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�yekfFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�xY7fTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�wQ�)fNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�v[�IfBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��uU�=fBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�tQ�CfNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�s]-fBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�rQ=fNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�qQ�{fNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�p[WfBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��o[�SfBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�nU_fBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�mK�fElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�l]GfBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021) � �%�w M � " * � n # � �j xK��J��� � � J�-y!fBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�,y�sfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�+m�efBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�*m�)fBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�)m�fBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�(e?fFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�'yfBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�&yUfBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�%y+fBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�$y{fBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�#y�fBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�"yOfBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�!m�YfBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J� y!fBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A� mfBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V� oCfBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O� m�5fBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F� ]5fBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QEfNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�]qfBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]MfBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�]�fBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�]�fBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]�fBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�-fBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]ifBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]kfBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;fTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�QfBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]'fBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 final ! y n�c � r 6 � � � M � @ �%�|��C��H�Y � y F�N]5fDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�M]9fDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�L];fDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�K]ifDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�J]/fDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�I]/fDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�H_ufDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�GE fTim Powers <timp@redhat.com>>.��- rebuilt\�F__fDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Ec�fNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�D_� fDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�C_gfDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�B]efDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�AMUfKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�@]SfKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�?]�SfKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�>m%fBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�=E3fTim Powers <timp@redhat.com>=@- automated rebuild9�<E3fTim Powers <timp@redhat.com><��- automated rebuild�7�;m�fBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�:e?fFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�9m]fBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�8m�}fBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��7[�MfElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�6mwfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�5EEfTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�4E3fTim Powers <timp@redhat.com><<0�- automated rebuildA�3mfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�2{#fBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�1yCfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�0yMfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�/y�SfBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��.y�'fBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257) - �@��C � @ � � m � c � T � � ,�a �_�x�~4��a �z�� �{ � P�{_GfDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�zK fElliot Lee <sopwith@redhat.com>@��- rebuiltq�y_�fDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�x_CfDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�w_EfDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�v_�fDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�u__fDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��t_�1fDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�s]YfDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�rK fElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�qeIfFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�pGmfTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�o]+fDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�nK fElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�m]7fDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�l]CfDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�k]/fDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�j]kfDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�i]+fDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�he/fDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�gcOfDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�feqfFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�ecEfDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�dc#fDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�ccWfDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�bcyfDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�acofDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�`cefDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�__WfDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�^_=fDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�]_}fDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�\_GfDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�[_=fDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�Z_}fDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�Y_=fDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�X_?fDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�WK fElliot Lee <sopwith@redhat.com>>��@- rebuiltL�V_?fDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�U_�fDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�T_?fDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�S_?fDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�R_afDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�Q]?fDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�P]7fDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�O]� fDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threads �b�h | H � Z � � DW�'z�I�E� x�e�fJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k�fJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1fJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�yfJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�s�kfJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}� s� fJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)� {�[fJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C� {�fJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf� {WfJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i� s�cfJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�UfJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�mfJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�QofJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�Q�!fJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�Q�fJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�MfJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�QufJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5fJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd� Q}fJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQfJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�~Q�}fJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�}_;fDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�|_CfDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps L � 5 � ] � I � �� ���bZ � L }�#m�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �"m�+fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��!m� fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw� k�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_� k�WfJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y� k� fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K� s)fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h� k�ifJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�efJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�s�YfJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�q�kfJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qWfJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qmfNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qafJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�ufJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�=fJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � @ � , < � �B�L�}�cv�� � � �:m�)fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�9m_fJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�8k�]fJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�7kSfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�6k�kfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�5qcfJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�4k�qfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�3mWfFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�2okfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��1k�AfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�0kQfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��/q�fJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�.S fJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �-o�SfJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��,m�AfJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�+m�ofJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�*m�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�)cAfTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�(m� fJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �'m�/fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�&m�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �%m�fJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�$m�wfJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled F _ � � � [ � �L�� �, � F Z�KsGfMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Js�fMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Im�fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�HskfFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Gm�fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Fm�9fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�EyAfMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�DuYfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�C{ fJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Bu�GfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�Am�fJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�@m?fJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�?m�YfJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�>m�fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��=m�!fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�<m�efJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�;m�{fJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc i A�a � Q � M � \�b�M�2�=q � i p�ac�fAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��`c�CfAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�_c�1fAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�^c� fAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�]c�fAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�\c}fAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�[c�ofAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�ZqofMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Yq�UfMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��Xq� fMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�W}�_fMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Vq�UfMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �Uq�%fMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Tq� fMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Sq�ufMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Rq�?fMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�QqcfMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Ps� fMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Os�)fMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Ns� fMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�MsOfMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Ls�fMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context } �4_ g 7 q v a-�g��oe� � } q�uc�fAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�t_�KfAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�s_EfAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�r[�7fAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��q[�5fAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�p[�fAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�o[�sfAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�n[�EfAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�mcMfAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�lcyfAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�kc�fAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��jc�CfAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��ic�-fAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�hcfAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�gc�%fAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�fc�yfAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�ec� fAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�dc�CfAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�cccfAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�bcofAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995) f v � f [ � W � B � .����@�t�7�e f ��g�MfAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�ccfAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W� cQfAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u� c� fAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)�� g�9fAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'� c�ofAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch�� g�=fAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�ifAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �g�1fAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� fAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�c�fAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�g�fAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�+fAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�eufAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a�fAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\� eYfAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�eefAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�~a�{fAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�}mUfWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �|a�afAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�{_�ifAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�zcgfAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�y_{fAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�xc�wfAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�wc�fAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��v_�1fAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856) � �D�� � G � � � l ��+� p�x& � ��(c�GfAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�'c�=fAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�&c�ufAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��%c�-fAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�$c�ufAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �#c�[fAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�"cufAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�!cefAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a� cefAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283�� g�-fAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)�� g�GfAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q� cEfAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d� �1fRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g-fAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�g�fAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �g�7fAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�gqfAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�c�fAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�c� fAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�g�wfAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��g�KfAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�g?fAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�gUfAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gAfAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cmfAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191) � �T� � s � b � � � � w�_�X�ff�� Z�| � ��Gi� fAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�FiefAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�EiqfAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�De}fAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�Ce� fAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Be�fAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�AekfAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�@eqfAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�?e�fAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�>e}fAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�=i�fAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �<e�WfAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�;amfAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�:]ifAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�9aOfAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�8aYfAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �7a�[fAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�6]�fAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��5e�#fAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�4ekfAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�3icfAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�2e�gfAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�1c�?fAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�0g�fAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��/c�?fAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�.gKfAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�-c�YfAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�,g]fAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�+g%fAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�*g;fAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�)cSfAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159) � �D � Q � � _ � n � U �z�"��F?#? � I�ag1fAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�`i�[fMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��_i�KfMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��^e�%fAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��]g�GfAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�\c�=fAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�[cfAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �Za�7fAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�YakfAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�XagfAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��W�!�fFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �Ve�7fMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�UsAfCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�TaGfAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�SaQfAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�R[MfAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�QgqfAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�PkufMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Ok�fAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Ng�cfAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Mi[fAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�LemfAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�KeGfAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Ji�MfAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�Ie�fAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�He�fAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet _ g � B � ! � X � �m�w��.�T�g��} � � _ H�~a5fAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�}_EfJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�|_�!fJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�{[[fAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�z[�fAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�y[;fAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �xi�fAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�wi5fAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�vi]fAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��ui�'fAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �ti�/fAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�se3fAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�reMfAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�qe3fAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �pe�_fAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�oe� fAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�ne�fAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�me3fAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�le�SfAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��ke�IfAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�ja�kfAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�igAfTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�he�fMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��ga�%fAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��f� �fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�e[efAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�d[�+fAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�c[�mfAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�b[�fAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms ���4 � � > � � � 2 � Q�|7������N��j� � � �+�fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm� gyfAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e=fAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�e�afAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�efAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�e3fAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�c� fAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�akfAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�a5fAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��e�'fJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�a� fAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �a�[fAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a}fAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�WfAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5fAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�[/fAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K� g5fAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1�� e�%fAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu� e� fAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf� aqfAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX� aUfAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a�fAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5fAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[wfAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�g� fAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��e�SfAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[fAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�c5fAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� fAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)�� a�QfAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{fAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDB [ #�w � > � u � o � x & x�d �;�n�p"�!� � [ V�<[WfAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �;[�AfAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�:gSfAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��9g�'fAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�8g�fAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�7g5fAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�6eWfAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �5e�WfAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�4eWfAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�3eyfAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�2[qfAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�1[yfAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�0[WfAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�/[�ufAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�.g�fAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�-g�efAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�,g�qfAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�+aCfAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��*a�%fAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�)a�fAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�(a=fAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�'aWfAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�&aUfAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�%aUfAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�$Y�fDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�#[mfAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�"g{fAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�!gafAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[� gUfAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK� g5fAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y� [�[fAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings �� | ! � � � G�[�9��D�x�� f � � �Zm�/fTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�Yg� fAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�XgOfAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�Wg�fAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�Vi�fTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�UcYfAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��Ti�!fTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�Sa� fAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�RaGfAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�Qg�fTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Pa�qfAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Og?fTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��N[�3fAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�M[GfAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�L[5fAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��K[�WfAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Jc?fAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Ig�9fTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �Hg� fTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�GgifTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Fg� fTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Ea5fAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��D�%�fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Cs}fVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�BaUfAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��A[�/fAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�@[�fAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�?[�fAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��>[�MfAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�=[�fAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0) � . � � � � s �����a}�B��;�� � �Y�tg�OfTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�se?fDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�rgifHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�qc3fTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�pcqfTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�oe?fDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�na� fTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�ma�fTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�la�cfTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��ka�'fTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�ja�UfTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�iaMfTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�ha�fTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�gaifTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��fa�?fTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�eg�fTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�dgsfTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�cg�fTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�bg�OfTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�ag=fTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �`g�7fTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�_aefTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �^a�]fTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�]m_fTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��\m�9fTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�[m�3fTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) I �t � � � � � s �o�i �L�M�5��G � I Z�oKfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�OfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�o�ofPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l� o�mfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J� g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J� g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G� g�+fTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W� gMfTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_fTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�wfTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gWfTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�gqfTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J� g3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gmfTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��~g�%fTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�}g�wfTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�|g� fTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�{gkfTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�zg�ofTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��yg�!fTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�xk3fTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�wgIfTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �vg�7fTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�ug� fTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �r � t � u � 1 � C � d���w&�(�:�)�>���� � �b�0u�SfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�/o[fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�.o�sfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�-o3fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�,o;fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�+oifPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�*o� fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�)oofPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �(o�QfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�'o�fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�&oifPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��%o� fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�$uufMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�#o3fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�"o[fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�!o�fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_� oUfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh� ogfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e� oafPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t� ofPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z� o� fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�osfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�oufPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�oWfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�oofPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�oyfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��o�#fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��o�fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�o�fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �o�SfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��o� fPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oWfPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) � k� � * � M � s � � .��~��Y�l�*� � � �O{�#fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��N{�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��M{�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�LwUfTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�KwufTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�J{�{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�I{WfArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �H{�!fArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�GwCfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Fw�cfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Ew�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�DwqfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Cw�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Bw}fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��A}�fMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�@s�efTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�?wsfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�>wifPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�=w�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�<wmfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�;wgfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�:sofPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�9w[fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�8u3fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��7u�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�6uwfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�5uUfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�4u� fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�3u�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�2u[fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��1u�1fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package � � � � $ � ! � b � ���=�{>��}�=�U��7�� � �>�oO�1gPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�nU]gBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�mU5gBill Nottingham <notting@redhat.com>7��@- initscript munging`�lUqgBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�kG�gJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�jUWgBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �iG�wgJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�hU9gBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�gGqgJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�fM�wgStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�eU�gBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��dS�;gCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�cS{gCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�bOagPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�aS'gCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�`SgCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�_GkgJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�^G�gJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�]GkgJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��\G�AgJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�[G3gJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �ZO�ogManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�Y]�ygScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �X�fLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �Wq�fStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �V}�!fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�U}gfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��T}�9fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�S}�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��R{�7fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�Q{cfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�P{kfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # � o*�D � l � O � ] 5 � ��R~ �P��w=��=�l]�J � ��]�/gBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�] gBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�agBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�]�gBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�M�{gKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f� ]ugBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9� ]gBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1�� ]�IgBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o� ]�gBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?� ]'gBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�];gBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�]gBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]!gBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�M3gProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�eOgFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�ekgFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�Y7gTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�Q�)gNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P� [�IgBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��U�=gBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�~Q�CgNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�}]-gBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�|Q=gNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�{Q�{gNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�z[WgBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��y[�SgBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�xU_gBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�wK�gElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�v]GgBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�uS}gCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�t]�gBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��s]�YgBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�r]5gBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�qU5gBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �pS�KgCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. ! �S�E � K p & � _ � mu �n%R��h�_� �c�� u�3m�gBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�2e?gFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�1ygBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�0yUgBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�/y+gBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�.y{gBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�-y�gBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�,yOgBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�+m�YgBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�*y!gBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�)mgBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�(oCgBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�'m�5gBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�&]5gBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�%QEgNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�$]qgBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�#]MgBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�"]�gBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�!]�gBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w� ]�gBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C� ]�-gBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`� ]igBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a� ]kgBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G� Y;gTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��]�QgBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]'gBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�]�gBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�]5gBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�] gBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�]ggBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�]�wgBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�]AgBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�]_gBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set { � � 1 � & � y 5 � � B�u���B��?�{ { �|�N_� gDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�M_ggDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�L]egDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�KMUgKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�J]SgKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�I]�SgKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�Hm%gBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�GE3gTim Powers <timp@redhat.com>=@- automated rebuild9�FE3gTim Powers <timp@redhat.com><��- automated rebuild�7�Em�gBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�De?gFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�Cm]gBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�Bm�}gBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��A[�MgElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�@mwgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�?EEgTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�>E3gTim Powers <timp@redhat.com><<0�- automated rebuildA�=mgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�<{#gBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�;yCgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�:yMgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�9y�SgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��8y�'gBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�7y!gBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�6y�sgBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�5m�egBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�4m�)gBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) . � �,��J � U � K � S � � } .�r$�c�V�"�� �}9��?��|" � � 2�|K gElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�{eIgFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�zGmgTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�y]+gDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�xK gElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�w]7gDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�v]CgDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�u]/gDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�t]kgDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�s]+gDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�re/gDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�qcOgDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�peqgFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�ocEgDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�nc#gDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�mcWgDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�lcygDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�kcogDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�jcegDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�i_WgDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�h_=gDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�g_}gDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�f_GgDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�e_=gDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�d_}gDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�c_=gDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�b_?gDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�aK gElliot Lee <sopwith@redhat.com>>��@- rebuiltL�`_?gDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�__�gDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�^_?gDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�]_?gDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�\_agDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�[]?gDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�Z]7gDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�Y]� gDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�X]5gDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�W]9gDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�V];gDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�U]igDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�T]/gDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�S]/gDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�R_ugDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�QE gTim Powers <timp@redhat.com>>.��- rebuilt\�P__gDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Oc�gNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � ��I � � 2 � � Y c � & ��~�����$� � �-�s�kgJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�s� gJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{�[gJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�{�gJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�{WgJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�s�cgJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��Q�UgJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �Q�mgJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�QogJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�Q�!gJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�Q�gJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M� Q�MgJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`� QugJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec�� Q�5gJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd� Q}gJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN� QQgJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�}gJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_;gDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�_CgDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�_GgDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K gElliot Lee <sopwith@redhat.com>@��- rebuiltq�_�gDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�_CgDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�_EgDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp� _�gDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�__gDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��~_�1gDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�}]YgDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context � L � A � � � � #��k���� � �_�)k�WgJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�(k� gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�'s)gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�&k�igJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�%u�egJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�$s�YgJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�#s�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�"q�kgJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�!qWgJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l� qmgNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf� qagJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1� q�ugJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon�� k�=gJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x� e�gJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�k�gJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1gJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�k�ygJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � ~ � p | � } m�^��p7�T�O�=� g�?qcgJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�>k�qgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�=mWgFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�<okgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��;k�AgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�:kQgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��9q�gJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�8S gJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �7o�SgJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��6m�AgJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�5m�ogJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�4m�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�3cAgTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�2m� gJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �1m�/gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�0m�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �/m�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�.m�wgJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�-m�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �,m�+gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��+m� gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�*k�gJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) � � � ( � ��qqL�{�N � � Z�OyAgMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�NuYgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�M{ gJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Lu�GgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�Km�gJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Jm?gJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Im�YgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Hm�gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Gm�!gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�Fm�egJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�Em�{gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Dm�)gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�Cm_gJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�Bk�]gJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�AkSgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�@k�kgJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � 1 � = � W � 7 � (�>�o�X�C � ��bq� gMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�a}�_gMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�`q�UgMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �_q�%gMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��^q� gMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�]q�ugMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��\q�?gMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�[qcgMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�Zs� gMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �Ys�)gMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�Xs� gMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�WsOgMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�Vs�gMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�UsGgMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��Ts�gMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��Sm�gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�RskgFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�Qm�gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��Pm�9gJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � [�@ � \ � z � ; fn>x}h4�n� � �%�y[�sgAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�x[�EgAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�wcMgAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�vcygAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�uc�gAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��tc�CgAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��sc�-gAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�rcgAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�qc�%gAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�pc�ygAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�oc� gAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�nc�CgAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�mccgAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�lcogAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�kc�gAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��jc�CgAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�ic�1gAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�hc� gAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�gc�gAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�fc}gAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�ec�ogAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�dqogMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�cq�UgMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. � � y . � � �d���I�8�t�R�H � �8�c�gAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�g�gAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E� c�+gAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj� eugAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1� a�gAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\� eYgAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb� eegAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{gAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mUgWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�agAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�_�igAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cggAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�_{gAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�c�wgAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�c�gAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)�� _�1gAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�c�gAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�~_�KgAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�}_EgAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�|[�7gAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��{[�5gAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�z[�gAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist � E� y � < � j k � Q�c�����>���^��* � � �-c�[gAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�,cugAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�+cegAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�*cegAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��)g�-gAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��(g�GgAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�'cEgAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�&�1gRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�%g-gAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�$g�gAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �#g�7gAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�"gqgAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�!c�gAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4� c� gAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-� g�wgAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch�� g�KgAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP� g?gAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[� gUgAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�gAgAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cmgAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��g�MgAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�ccgAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�cQgAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�c� gAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��g�9gAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�c�ogAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��g�=gAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�g�igAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �g�1gAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� gAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) H R� Z q � =�Q� X�����3�i � H ~�Gi�gAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Fe�WgAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�EamgAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�D]igAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�CaOgAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�BaYgAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �Aa�[gAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�@]�gAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��?e�#gAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�>ekgAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�=icgAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�<e�ggAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�;c�?gAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�:g�gAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��9c�?gAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�8gKgAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�7c�YgAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�6g]gAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�5g%gAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�4g;gAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�3cSgAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��2c�GgAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�1c�=gAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�0c�ugAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��/c�-gAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�.c�ugAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 i ��$ � F � � > � {�_ �>�&�f �_�2�h � i n�ecgAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �da�7gAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�cakgAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�baggAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��a�!�gFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �`e�7gMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�_sAgCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�^aGgAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�]aQgAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�\[MgAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�[gqgAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�ZkugMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�Yk�gAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�Xg�cgAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�Wi[gAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�VemgAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�UeGgAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��Ti�MgAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�Se�gAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�Re�gAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��Qi� gAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�PiegAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�OiqgAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�Ne}gAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�Me� gAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�Le�gAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�KekgAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�JeqgAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�Ie�gAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�He}gAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter) � .� � r � B O ����c���Y��;��p$ � � �~i�/gAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�}e3gAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�|eMgAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�{e3gAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �ze�_gAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�ye� gAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�xe�gAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�we3gAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�ve�SgAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��ue�IgAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�ta�kgAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�sgAgTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�re�gMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��qa�%gAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��p� �gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�o[egAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�n[�+gAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�m[�mgAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�l[�gAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�kg1gAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�ji�[gMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��ii�KgMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��he�%gAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��gg�GgAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�fc�=gAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u� a� gAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� � a�[gAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�a}gAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�a�WgAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�a5gAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�[/gAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�g5gAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��e�%gAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�e� gAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�aqgAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�aUgAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�a�gAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�a5gAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[wgAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�g� gAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��e�SgAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\� c[gAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI� c5gAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t� a� gAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)�� a�QgAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k� a{gAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5gAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_EgJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�!gJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�[[gAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�gAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�[;gAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �i�gAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�i5gAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`� i]gAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��i�'gAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l�=eygAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�<[qgAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�;[ygAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�:[WgAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�9[�ugAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�8g�gAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�7g�egAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�6g�qgAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�5aCgAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��4a�%gAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�3a�gAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�2a=gAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�1aWgAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�0aUgAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�/aUgAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�.Y�gDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�-[mgAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�,g{gAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�+gagAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�*gUgAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�)g5gAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�([�[gAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �'�+�gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�&gygAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�%e=gAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�$e�agAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�#egAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�"e3gAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�!c� gAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c� akgAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH� a5gAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3�� e�'gJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�\aGgAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�[g�gTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�Za�qgAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�Yg?gTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��X[�3gAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�W[GgAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�V[5gAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��U[�WgAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�Tc?gAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�Sg�9gTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �Rg� gTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�QgigTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�Pg� gTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Oa5gAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��N�%�gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Ms}gVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�LaUgAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��K[�/gAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�J[�gAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�I[�gAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��H[�MgAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�G[�gAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�F[WgAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �E[�AgAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�DgSgAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��Cg�'gAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�Bg�gAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�Ag5gAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�@eWgAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �?e�WgAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�>eWgAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~�xa� gTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�wa�gTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�va�cgTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��ua�'gTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�ta�UgTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�saMgTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�ra�gTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�qaigTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��pa�?gTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�og�gTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�ngsgTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�mg�gTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�lg�OgTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�kg=gTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �jg�7gTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�iaegTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �ha�]gTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�gm_gTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��fm�9gTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�em�3gTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �dm�/gTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�cg� gAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�bgOgAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�ag�gAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�`i�gTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�_cYgAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��^i�!gTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�]a� gAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�gMgTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�g�_gTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�g�wgTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gWgTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J� g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i� gqgTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J� g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J� g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g� gmgTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��g�%gTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�wgTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� gTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�gkgTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�ogTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��g�!gTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�k3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�gIgTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� � g�7gTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�g� gTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�~g�OgTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�}e?gDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�|gigHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�{c3gTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�zcqgTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�ye?gDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � �2o�QgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�1o�gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�0oigPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��/o� gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�.uugMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�-o3gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�,o[gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�+o�gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�*oUgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�)oggPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�(oagPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�'ogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�&o� gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�%osgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�$ougPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�#oWgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�"oogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�!oygPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)�� o�#gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)�� o�gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v� o�gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� � o�SgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal�� o� gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�oWgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�oKgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �o�OgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�o�ogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�o�mgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�g3gTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�g�+gTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � �R{�!gArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�QwCgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�Pw�cgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Ow�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�NwqgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Mw�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Lw}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��K}�gMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Js�egTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�IwsgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�HwigPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Gw�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�FwmgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�EwggPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�DsogPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�Cw[gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�Bu3gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��Au�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�@uwgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�?uUgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�>u� gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�=u�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�<u[gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��;u�1gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�:u�SgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�9o[gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�8o�sgPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�7o3gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�6o;gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�5oigPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�4o� gPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�3oogPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) � ��$ � 7 � � = � � C�@�.({���V��W�� � v�pU�hBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��oS�;hCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�nS{hCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�mOahPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�lS'hCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�kShCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�jGkhJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�iG�hJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�hGkhJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��gG�AhJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�fG3hJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �eO�ohManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�d]�yhScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>��c� �igPavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �b�gLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �aq�gStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �`}�!gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�_}ggPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��^}�9gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�]}�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��\{�7gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�[{cgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�Z{kgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �Y{�#gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��X{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��W{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�VwUgTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�UwugTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�T{�{gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�S{WgArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers " � �y � � � u Z � � ; � .�t���H7��Z�P � � 7�]hBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�]!hBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�M3hProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�eOhFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�ekhFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE� Y7hTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{� Q�)hNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P� [�IhBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man�� U�=hBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H� Q�ChNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�]-hBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�Q=hNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�Q�{hNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�[WhBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��[�ShBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�U_hBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�K�hElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�]GhBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e� S}hCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�]�hBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��~]�YhBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�}]5hBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�|U5hBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �{S�KhCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�zO�1hPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�yU]hBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�xU5hBill Nottingham <notting@redhat.com>7��@- initscript munging`�wUqhBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�vG�hJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�uUWhBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �tG�whJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�sU9hBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�rGqhJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�qM�whStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # � �r k/ � � � G � � � � N �P�m ��e��g �l�@ � � J�5y!hBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�4mhBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�3oChBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�2m�5hBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�1]5hBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�0QEhNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�/]qhBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�.]MhBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�-]�hBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�,]�hBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�+]�hBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�*]�-hBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�)]ihBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�(]khBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�'Y;hTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��&]�QhBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�%]'hBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�$]�hBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�#]5hBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�"] hBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�!]ghBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(� ]�whBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL� ]AhBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[� ]_hBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set�� ]�/hBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;� ] hBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �]�ahBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�]�hBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�M�{hKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]uhBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�]hBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��]�IhBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�]�hBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�]'hBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�];hBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � [�. � b � - � h ��x�>�}.��i�a*�s�|@ � F�Sm%hBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�RE3hTim Powers <timp@redhat.com>=@- automated rebuild9�QE3hTim Powers <timp@redhat.com><��- automated rebuild�7�Pm�hBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�Oe?hFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�Nm]hBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�Mm�}hBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��L[�MhElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�KmwhBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�JEEhTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�IE3hTim Powers <timp@redhat.com><<0�- automated rebuildA�HmhBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�G{#hBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�FyChBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�EyMhBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�Dy�ShBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��Cy�'hBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�By!hBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�Ay�shBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�@m�ehBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�?m�)hBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�>m�hBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�=e?hFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�<yhBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�;yUhBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�:y+hBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�9y{hBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�8y�hBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�7yOhBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�6m�YhBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z�xcWhDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�wcyhDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�vcohDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�ucehDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�t_WhDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�s_=hDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�r_}hDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�q_GhDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�p_=hDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�o_}hDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�n_=hDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�m_?hDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�lK hElliot Lee <sopwith@redhat.com>>��@- rebuiltL�k_?hDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�j_�hDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�i_?hDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�h_?hDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�g_ahDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�f]?hDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�e]7hDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�d]� hDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�c]5hDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�b]9hDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�a];hDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�`]ihDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�_]/hDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�^]/hDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�]_uhDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�\E hTim Powers <timp@redhat.com>>.��- rebuilt\�[__hDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�Zc�hNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�Y_� hDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�X_ghDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�W]ehDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�VMUhKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�U]ShKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�T]�ShKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i� s�chJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .�� Q�UhJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� � Q�mhJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�QohJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�Q�!hJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�Q�hJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�Q�MhJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�QuhJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��Q�5hJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�Q}hJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�QQhJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�Q�}hJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�_;hDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�_ChDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�_GhDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�K hElliot Lee <sopwith@redhat.com>@��- rebuiltq�_�hDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN� _ChDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO� _EhDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp� _�hDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\� __hDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen�� _�1hDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�]YhDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�K hElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�eIhFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�GmhTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�]+hDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�K hElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�]7hDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�]ChDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC� ]/hDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�]khDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�~]+hDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�}e/hDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�|cOhDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�{eqhFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�zcEhDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�yc#hDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+�0u�ehJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�/s�YhJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�.s�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�-q�khJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�,qWhJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�+qmhNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�*qahJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�)q�uhJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��(k�=hJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�'e�hJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�&k�hJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�%k�1hJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�$k�yhJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�#s�khJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�"s� hJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�!{�[hJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C� {�hJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf� {WhJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � �Bo�ShJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��Am�AhJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�@m�ohJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�?m�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�>cAhTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�=m� hJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �<m�/hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�;m�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �:m�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�9m�whJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�8m�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �7m�+hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��6m� hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�5k�hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�4k�WhJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�3k� hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�2s)hJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�1k�ihJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�Vm�hJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�Um?hJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�Tm�YhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�Sm�hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��Rm�!hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�Qm�ehJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�Pm�{hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �Om�)hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�Nm_hJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�Mk�]hJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�LkShJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�Kk�khJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�JqchJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�Ik�qhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�HmWhFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�GokhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��Fk�AhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�EkQhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��Dq�hJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�CS hJesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �jq�%hMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��iq� hMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�hq�uhMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��gq�?hMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�fqchMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�es� hMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �ds�)hMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�cs� hMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�bsOhMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�as�hMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�`sGhMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��_s�hMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��^m�hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�]skhFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�\m�hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��[m�9hJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�ZyAhMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�YuYhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�X{ hJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�Wu�GhJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��~c�-hAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�}chAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�|c�%hAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�{c�yhAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�zc� hAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�yc�ChAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�xcchAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�wcohAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�vc�hAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��uc�ChAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�tc�1hAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�sc� hAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�rc�hAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�qc}hAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�pc�ohAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�oqohMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�nq�UhMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��mq� hMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�l}�_hMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�kq�UhMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�eehAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�a�{hAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�mUhWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �a�ahAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�_�ihAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�cghAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�_{hAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+� c�whAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q� c�hAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)�� _�1hAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q� c�hAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S� _�KhAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�_EhAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�[�7hAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��[�5hAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�[�hAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�[�shAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�[�EhAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�cMhAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�cyhAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0� c�hAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��c�ChAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) A �� � u � � p � 2��}#�$�h � k�>�A A �|�/g�hAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �.g�7hAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�-gqhAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�,c�hAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�+c� hAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�*g�whAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��)g�KhAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�(g?hAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�'gUhAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�&gAhAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�%cmhAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��$g�MhAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�#cchAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�"cQhAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�!c� hAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)�� g�9hAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'� c�ohAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch�� g�=hAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&� g�ihAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� � g�1hAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�g� hAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�c�hAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�g�hAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�c�+hAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�euhAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�a�hAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�eYhAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC � �O�b � r � S �[ r�� >�R�Y � � e�IekhAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�HichAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�Ge�ghAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�Fc�?hAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�Eg�hAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��Dc�?hAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�CgKhAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�Bc�YhAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�Ag]hAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�@g%hAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�?g;hAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�>cShAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��=c�GhAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�<c�=hAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�;c�uhAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��:c�-hAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�9c�uhAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �8c�[hAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�7cuhAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�6cehAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�5cehAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��4g�-hAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��3g�GhAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�2cEhAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�1�1hRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�0g-hAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0 x z�^ � F � ? � M M � z A�c�v9� �^��T � x i�fgqhAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�ekuhMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�dk�hAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�cg�chAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�bi[hAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�aemhAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�`eGhAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��_i�MhAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�^e�hAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�]e�hAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��\i� hAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�[iehAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�ZiqhAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�Ye}hAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�Xe� hAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�We�hAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�VekhAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�UeqhAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�Te�hAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�Se}hAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�Ri�hAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �Qe�WhAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�PamhAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�O]ihAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�NaOhAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�MaYhAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �La�[hAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�K]�hAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��Je�#hAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 file �S�� x � � � D =!=��X�3��I� �� e�IhAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�a�khAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�~gAhTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�}e�hMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��|a�%hAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��{� �hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�z[ehAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�y[�+hAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�x[�mhAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�w[�hAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�vg1hAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�ui�[hMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��ti�KhMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��se�%hAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��rg�GhAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�qc�=hAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�pchAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �oa�7hAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�nakhAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�maghAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��l�!�hFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �ke�7hMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�jsAhCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�iaGhAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�haQhAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�g[MhAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 release z �V � ` � p � = � P ���f��H�?�| �� � � z X� aUhAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y� a�hAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH� a5hAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�[whAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�g� hAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��e�ShAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�c[hAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�c5hAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�a� hAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��a�QhAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�a{hAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�a5hAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�_EhJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�_�!hJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�[[hAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�[�hAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�[;hAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� � i�hAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL� i5hAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`� i]hAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)�� i�'hAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� � i�/hAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�e3hAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�eMhAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�e3hAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �e�_hAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�e� hAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�e�hAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�e3hAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�e�ShAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed " � � �J � � m � U � � � O�8�w���L�w�J��D�M � O�@aChAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��?a�%hAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�>a�hAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�=a=hAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�<aWhAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�;aUhAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�:aUhAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�9Y�hDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�8[mhAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�7g{hAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�6gahAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�5gUhAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�4g5hAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�3[�[hAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �2�+�hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�1gyhAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�0e=hAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�/e�ahAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�.ehAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�-e3hAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�,c� hAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�+akhAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�*a5hAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��)e�'hJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�(a� hAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �'a�[hAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�&a}hAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�%a�WhAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�$a5hAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�#[/hAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�"g5hAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��!e�%hAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu� e� hAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf� aqhAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configuration N R � � > � { � H � J�����5�#�8�V�?�: � N � �]g� hTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�\gihTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�[g� hTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�Za5hAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��Y�%�hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�Xs}hVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�WaUhAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��V[�/hAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�U[�hAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�T[�hAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��S[�MhAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�R[�hAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V�Q[WhAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �P[�AhAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�OgShAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��Ng�'hAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�Mg�hAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�Lg5hAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�KeWhAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �Je�WhAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�IeWhAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�HeyhAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�G[qhAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�F[yhAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�E[WhAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�D[�uhAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�Cg�hAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�Bg�ehAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�Ag�qhAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patch m .�B � � � � + � _ � z M�w� �����Z � m }�zg�hTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�ygshTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�xg�hTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�wg�OhTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�vg=hTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �ug�7hTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�taehTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �sa�]hTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�rm_hTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��qm�9hTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�pm�3hTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �om�/hTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�ng� hAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�mgOhAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�lg�hAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�ki�hTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�jcYhAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��ii�!hTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�ha� hAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�gaGhAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�fg�hTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�ea�qhAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�dg?hTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��c[�3hAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�b[GhAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�a[5hAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��`[�WhAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�_c?hAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�^g�9hTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings � n �> a � � = � j � M� ��:��8� � ��g�%hTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�g�whTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�g� hTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�gkhTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�g�ohTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��g�!hTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L� k3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U� gIhTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� � g�7hTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x� g� hTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y� g�OhTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�e?hDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�gihHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�c3hTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�cqhTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�e?hDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�a� hTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�a�hTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�a�chTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)�� a�'hTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�a�UhTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�~aMhTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�}a�hTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�|aihTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��{a�?hTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version � �I��C � � J � 4 � � u��3�s�H�J�K�y� � t�2ohPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�1o� hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�0oshPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�/ouhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�.oWhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�-oohPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�,oyhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��+o�#hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��*o�hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�)o�hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �(o�ShPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��'o� hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�&oWhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�%oKhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �$o�OhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�#o�ohPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�"o�mhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�!g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J� g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G� g�+hTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W� gMhTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!� g�_hTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m� g�whTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�gWhTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�gqhTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�g3hTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�gmhTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827) ! q �-� � Z � \ � n � ] � r ���9�S�n�o�A�` � q m�SwihPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�Rw�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�QwmhPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�PwghPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�OsohPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�Nw[hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�Mu3hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��Lu�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�KuwhPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�JuUhPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�Iu� hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�Hu�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�Gu[hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��Fu�1hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�Eu�ShPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�Do[hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�Co�shPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�Bo3hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�Ao;hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�@oihPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�?o� hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�>oohPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �=o�QhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�<o�hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�;oihPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��:o� hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�9uuhMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�8o3hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�7o[hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�6o�hPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�5oUhPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�4oghPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�3oahPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646) ` ��U � V � e � Y � ` c�� y�uk� � �� � ` � �o{�#iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��n� �ihPavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �m�hLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �lq�hStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �k}�!hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�j}ghPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��i}�9hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�h}�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��g{�7hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�f{chPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�e{khPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �d{�#hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��c{�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��b{�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�awUhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�`wuhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�_{�{hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�^{WhArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �]{�!hArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�\wChPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�[w�chPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�Zw�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�YwqhPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Xw�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�Ww}hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��V}�hMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�Us�ehTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�TwshPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572) � � � � $ � ! � � C�a�g�d�R�5� � �>�}�kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{ckPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{kkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7��'�IjDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �s�#jStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�jStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�~}�jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��}{�7jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�|{cjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{{kjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �z{�#jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�7�y�'�IiDmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �xs�#iStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ws�iStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �v}�!iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�u}giPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��t}�9iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�s}�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��r{�7iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�q{ciPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�p{kiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake Q c�` � N � � H�9�#�K�`�f�c � Q � �"s�#mStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��!s�mStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>� }�mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{cmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)y��[lDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �}�!lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�}glPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�}�lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�{clPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�{klPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakey��[kDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� � }�!kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o� }gkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) m �9 � G � 8 � "�J���I�F�4 � m y�8�[oDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�7s� oStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �6s�#oStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��5s�oStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �4}�!oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�3}goPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��2}�9oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�1}�oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�0�)� nLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�/�[nDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�.s� nStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �-s�#nStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��,s�nStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �+}�!nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�*}gnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��)}�9nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�(}�nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��'{�7nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�&{cnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�"�%�)� mLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�$�[mDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�#s� mStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers 2 � � 1 � " � 4����� �� � 2y�M�[qDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Ls� qStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Ks�#qStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Js�qStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �I}�!qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�H}gqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��G}�9qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�"�F� �'pPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�E�)�SpLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�D�)� pLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�C�[pDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Bs� pStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �As�#pStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��@s�pStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �?}�!pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�>}gpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��=}�9pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�<}�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�"�;� �'oPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�:�)�SoLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�9�)� oLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file 8 � �t.��\ � � D � � r , � � X � � < � � g ��K�v/��Z��>��i"��M�x1��\ � � D�( � 9e3da8c246e93da3869444a1e978500ee6161df3cb4cefefffd15c832462e4e9D�' � 72525855a157ed94478934cca319d071509680d025a2bd484cd1e94032dab46bD�& � f5e4bf3bd1d726faba9d336175fef074a90e929db88c74b6ea53d8d6293c8ca7D�% � 0e33ca09ec586dd5ae2d38cea8390fd1fb97771699930466fb41aaf36bb3fd8dD�$ � 3dcc1d447a828a78fb343747a65631fb357eb8dd86b054cf55984d615f241c75D�# � 0ae74cc8011cd898358afdbc2f4ed3d4b4e9744c2a025bd5bdd2b28a25d9d6fdD�" � c8fed04c28c7c78555001a3f4e2e5b2e8a75112732bdd48ef028bf14b3a54103D�! � d8de6710e0b89984b5b88a29863d2b4fa29213a8d22b4b7320c9c80c5eb64150D� � 369e33bfdaee594de283ddb7bd2c181507441bdd702e24fa743da5db080ee688D� � ae1ee3353d3fa0b4d35031020513ce040c19a372400e6664267ccecd4bb439c1D� � f6c8201558aba719c30cdce3d31eded03e38a0ace69ee5fe0bde4e1dd803fe1bD� � e4904fecf06fad1a56bde5fc10faadb6d3fd4961c0ec49ef61a26f097378b67eD� � 6193aad894c56528a917283bbf5fa922c9982f83a995a1e37e0ac8859074cc64D� � cbc53ffdf6d1fa2e2bf083d232379bec6d1e4266d6f7553f5606a04f1e2bc7eaD� � 7cd0ee3900ce2583ba3df420f3fe5072a93ddc255c7111225d03e931d1fdbdf1D� � ab4946ad4c190e8ad6acb02d3e466c6610411cf08e20104446399bdc815fd1e7D� � 2cce804adba738fbc5a063915a5bf29a183436d9cb178c4625fde29ea12e8027D� � 61c41c65a350f95cf94b3dc01bfc3d21236072f6314e7fdbdc1fe647d91d95d3D� � 096306b06c3eb80b1b8582484ccbb03d71c23f9d876e09f4b7d9e6a79e5ec547D� � 27163cb80827660c120d4b3d5f12fb44cbd470ef7a6ca3c41127c67a42306128D� � 7402583f5a9f3a20514401e152d3c3404ffa3c0e615b4af06de94a833540bf02D� � de9447d3a012f29b113285fa7fa93486e05b4110eef20619b0c617fecd98bd8fD� � f6a29cea4d334d05badfb1150aded3d03667df3be95274ea6d292ff244a4ff63D� � 351cf531bd668ba6332235ec61fa646f381f45a44a9339a1661c618191183327D� � 452c908df23affca47d4ea44aded8bf3bf2fb9818855438ec59173065dbe4e53D� � f9fa89e6993e39c06a746217e7ee0e825b6d1a245fb511028266f81bd189adb2D� � 05550d4815fb93dbd94ad606fdbd0d467f0721abdc1e1214027b9dc0b3c933f5D� � 8e42991974a335a000e2fc6342054f438734797f4e7bafc2d9b19a62184e11edD� � eec0f60b2c0e4820e5ed2b2a003ed4b951ea67da3cef3ecf1536e72fe46eb944D� � 3d59b4ba38cdd3a396b56bbfab82883183181749d1c01be0836f86804415ffbeD� � 572c9623afdb026606c7eaf142df46f394403e1ff7f6b85841606b100716ceb5D� � 76f9ddf46fa8819af8ac21458426b018baf0116e9673f0c1ae9999b439d0b1d9D� � 38e077744a18a46bfbbf5e96c50d3bdef4d3e79a92e84c1ff1403c7baeecf213D� � 5048299a908b9836602e3dd77535d653318ad1f6a49266324872a74b92bc3c04D� � 177c1d1c7c152ec20fd59865bf875ecde7b8eb732340c6691d85aba5f4dcc169D� � 3f89b7f3ba23547e39e61a368767ddcc474bf603796f9545551a5aa562fabfbeD� � ff9656fb3b745c208a3c18d3c57b9bd5b59226dfdd166f3066e2449541268bc7D� � 96881e319004b44a6f14a0ef724c63cae9a4ad5d7cf6915b390fda0a0d1480ebD� � 6ad122145575a9fd835026dc010b55d52c8bccbccf3d134f417c874edafc282cD� � 47709daeab05b7587f9a551a9ff9dd9f9221192881970a97c16b8b8c89d2caa0D� � 0c64f2a20b2906a70b23abb7d197c3376f36ec1eb85e60f1b5666127eb663b1aD � 0d6913ccfcd98612d4b206b7bfd96c9c72bbc0da101ae4251efafc683eba83f1D~ � 7464886654bc3afc6b44f40f32428bb608bd1c1f3efd000169062a2f1090fe67D} � 993a5470e0eeec56c3f6bbe60bae8d64ee237ec1155a84a50daab41725bcd3b4D| � bcf42e529642c3e14065eea4915097d7ca87130b5e351480b0d0a8d6f3f5c0e3D{ � 940c22632e1d79e7dfafe0450fa3a7d0bb33e9010c6336c18120cb65bad94387Dz � 73f8d85f65eaecb5ae1bd7f01f8665acdb072a83a588861ba2d7317c0509c1acDy � 924f8ba2f14048e34300e03a05d9568282db1c4ab54729cb03de7b5e117e08bdDx � b67edee4717448a7de7e4c5193dbac9ec0a3cd9f2ad9bd87ea461ea93a3313faDw � 3f8239ed6fbdb8ba3c766c0f0e963101c50ded8b15927d57ec51303aec534e1fDv � 15ba0ebd94f54e22a5d660fb60107c77430605ef2fb30de93cf9592bea56539cDu � 4bd238cd0644f30a5b828aa6a1ff8c644ffe05d4f6ff6cf6e8425e89081912e9Dt � 983adb2dc742512e04b45ef1682fe310d44862ad702a7012e339c6df61241086Ds � 2b46d38241b146f2c0a50befaf43bfc7e6b47632f927b38c9c2e2260660376cfDr � 392aa757974874b91b79fb35036d8de9d7842eec8df55a9b4b2979e69a6f3725Dq � 643e02ccf532ae6809f7c22cf53ff9fd5f6a9f22c64105c58bb24cafd9fc902b � � � A � 2 � �D���� ��� � �G�as� sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �`s�#sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��_s�sStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �^}�!sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�]}gsPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.�\��CrLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�[� �'rPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�Z�)�SrLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�Y�)� rLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�X�[rDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�Ws� rStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �Vs�#rStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Us�rStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �T}�!rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�S}grPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��R}�9rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�.�Q��CqLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�P� �'qPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�O�)�SqLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�N�)� qLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file % �^ � w � � ���8Q+y�7�% � �us�#uStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ts�uStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �s}�!uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�-�r��EtJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�q��CtLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�p� �'tPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�o�)�StLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�n�)� tLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�m�[tDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�ls� tStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �ks�#tStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��js�tStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �i}�!tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�h}gtPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�-�g��EsJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�f��CsLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�e� �'sPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�d�)�SsLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�c�)� sLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�b�[sDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade � �9 R , z � ��q&�����: � �1��'�=vDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-���EvJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.���CvLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'vPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SvLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� vLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[vDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� vStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#vStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�vStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �~}�!vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�1�}�'�=uDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-�|��EuJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.�{��CuLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�z� �'uPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=�y�)�SuLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"�x�)� uLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey�w�[uDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�vs� uStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers E {� � ' @ h��X��� � E �.���CxLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'xPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SxLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"��)� xLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey��[xDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G�s� xStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#xStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�xStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�!��'� wJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1��'�=wDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-���EwJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�.���CwLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�"�� �'wPavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�=��)�SwLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�"� �)� wLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filey� �[wDmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G� s� wStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�#wStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�wStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) �� �����������������������ztnhb\VPJD>82,& ���������������������~xrlf`ZTNHB<60*$ � � � � � � � � � � � � � � � � � � � � � | v p j d ^ X R L F @ : 4 . ( " � � � � � � � � � � � � � � � � � � � � � � z t n h b \ V P J D > 8 2 , & � � � � � � � � � � � � � � � � � � � � � ~ x r l f ` Z T N H B < 6 0 * $ � � � � � � � � � � � � � � � � � � � � � | v p j d ^ X R L F @ : 4 . ( " � � � � � � � � � � � � � � � � � � � � � � z t n h b \ V P J D > 8 2 , & ���������������������~xrlf`ZTNHB<60*$ ���������������������|vpjd^XRLF@:4.(" ����������������������ztnhb\VPJD>82,& ���������������������~xrlf`ZTNHB<60*$ ���������������������|vpjd^XRLF@:4.(" z ��( �� ��u ��a ��K ��: ��# �� ��{ ��N ��- �� ��k ��I ��* �� ��n ��S ��6 �� ��w ��Y ��> ��" �� ��m ��Y ��B ��1 �� �� ��r ��E ��$ �� ��b ��A ��. �� �� ��s ��^ ��H ��. �� ��y ��X ��9 �� �� ��f ��D ��& �� ��o ��U ��: ��$ �� ��| ��h ��V ��D �� ��y ��[ ��8 �� ��x ��X ��9 � ~� }�c |�C {�$ z� y�m x�S w�5 v� u� t�u s�e r�O q�> p�" o�t n�Y m�8 l� k�u j�V i�6 h� g� f�b e�C d�$ c� b�m a�N `�5 _� ^� ]�q \�` [�I Z�8 Y�! X�t W�S V�5 U� T�o S�P R�0 Q� P�y O�\ N�= M� L� K�d J�H I�. H� G� F�h E�W D�@ C�/ B� A�k @�J ?�, >� =�g <�T ;�A :�- 9� 8� 7�n 6�T 5�; 4� 3�~ 2�_ 1�F 0�) /� .�j -�L ,�2 +� *�{ )�` (�J '�6 &�" %� $�| #�j "�D !� � �^ �< � �~ �_ �D �( � �i �J �1 � �y �[ �E �. � � �u �d �H � � �^ �; � �| �\ �@ �& � �i ��J ��- �� ��t ��[ ��A ��- �� �� ��o ��^ �G � �y �[ �7 � �v �V �: � � �c �C �% � �n �T �9 �% � �} ߮f ޮU ݮ> ܮ ۭp ڭR ٭. ح z Ԭg ӬS Ҭ? Ѭ* Ь ϫz Ϋa ͫE ̫$ ˫ ʪl ɪO Ȫ2 Ǫ Ʃr ũX ĩ; é! © ��p ��\ ��H ��4 ��" �� ��j ��E ��' �� ��b ��D ��$ �� ��j ��N ��/ �� ��p ��W ��9 �� �� ��k ��T ��A ��1 �� �� ��n ��@ ��% �� ��a ��A ��" �� ��f ��L ��. �� ��p ��S ��9 �� �� ��g ��S ��= ��, �� �� ��m ��@ �� �� ��] ��; �� ��| ��` ��E ��( �� ��i ��K �0 ~� }�z |�_ {�K z�4 y�# x� w�{ v�g u�; t� s�{ r�W q�5 p�# o� n�y m�_ l�C k�" j� i�j h�M g�0 f� e�p d�V c�9 b� a� `�n _�Z ^�F ]�2 \� [� Z�h Y�C X�' W� V�b U�C T�# S� R�i Q�M P�. O� N�o M�V L�9 K� J� I�k H�U G�A F�1 E� D� C�p B�C A�% @� ?�c >�D =�1 <� ;� :�o 9�Q 8�0 7� 6�y 5�\ 4�> 3� 2�~ 1�c 0�F /�- .� -�} ,�h +�T *�> )�, (� '�l &�I %�, $� #�e "�G !�& � �o �R �4 � �t �Y �< �# � �s �^ �J �4 �" � �b �? �" �~ �\ �D �( � q V 7 �F i����������~xrlf`ZTNHB<60*$ ���������������������|vpjd^XRLF���������������������|vpjd^XRLF@:4.(" ����������������������ztnhb\VPJD>82,& � � � � � � � � � � � � � � � � � � � z s l e ^ W P I B ; 4 - & � � � � � � � � � � � � � � � � � � ~ w p i b [ T M F ? 8 1 * # � � � � � � � � � � � � � � � � � � { t m f _ X Q J C < 5 . ' � � � � � � � � � � � � � � � � � � x q j c \ U N G @ 9 2 + $ � � � � � � � � � � � � � � � � � � | u n g ` Y R K D = 6 / ( ! �������������������yrkd]VOHA:3,% ������������������}vohaZSLE>70)" ����������?81*# ������������������{tmf_XQJC<5.' ���������� � � �u �a �M �8 �" � ��o ��S ��2 �� ��z ��] ��@ �� �� ��f ��I ��/ �� ��~ ��j ��V ��B ��0 �� ��x ��S ��5 �� ��p ��R ��2 �� ��x ��\ ��= �� ��~ ��e ��G ��- �� ��y ��b ��O ��? ��) �� ��| ��N ��3 �� ��o ��O ��0 �� ��t ��Z ��< �� ��~ ��a h��G g��+ f�� e��l d��O c��5 b�� a�� `��e _��O ^��; ]��' \�� [�� Z��m Y��D X�� W�� V��^ U��> T�� S�� R��d Q��J P��. O�� N��q M��R L��9 K�� J�� I��e H��N G��8 F��$ E�� D��~ C��m B��Q A��% @�� ?��i >��G =��( <�� ;�� :��l 9��S 8��7 7�� 6��x 5��_ 4��C 3��' 2�� 1��h 0��P /��2 .�� -��~ ,��h +��Q *��= )��. (�� '�� &��g %��= $��! #�� "��^ !��> �� �� ��e ��K ��, �� ��n ��R ��8 �� �� ��g ��S ��= ��, �� �� ��n ��C ��! �� ��a ��? ��- �� �� ��r ��^ ��I ��2 �� �� ���a ���B ���) ��� ���p ���Q ���0 ��� ���{ ���] ���D �* � � �p �Y H 1 큟 쁞d 끞G ꁞ$ 遞 聝g 灝G 恝( 偝 䁜s ぜW ⁜7 ၜ � ߁�b ށ�I ݁�. ܁� ہ� ځ�m ف�^ �I ׁ�8 ց� Ձ�m ԁ�Q Ӂ�0 ҁ� с�n Ё�P ρ�0 � ́�{ ́�\ ˁ�> ʁ� Ɂ� ȁ�h ǁ�J Ɓ�1 Ł� ā� Á�m �\ ���E ���4 ��� ���s ���Q ���4 ��� ���o ���S ���3 ��� ���{ ���_ ���C ���# ��� ���l ���N ���5 ��� ��� ���m ���Y ���J ���5 ���$ ��� ���Y ���= ��� ���z ���^ ���K ���7 ���! ��� ���i ���I ���- ��� ���w ���Y ���8 ��� ��� ���e ���L ���1 ��� ��� ���s ���^ ���M ���9 ��� ���l ���N ���* ��� ���l ���M ���0 ��� ���y ���Y ���; �� ~�� }��f |��M {��/ z�� y�� x��o w��_ v��I u��8 t�� s��n r��S q��1 p�� o��r n��_ m��L l��8 k��$ j�� i��y h��` g��G f��* e�� d��k c��R b��5 a�� `��v _��Y ^��> ]��! \�� [�n Z�X Y�D X�0 W� V� U�x T�R S�- R� Q�l P�J O�, N� M�m L�R K�6 J� I�w H�X G�? F�! E� D�i C�S B�< A�) @� ?� >�r =�V <�( ;� :�l 9�I 8�) 7� 6�j 5�N 4�4 3� 2�w 1�X 0�; /�! .� -�i ,�O +�; *�% )� (�} '�l &�U %�( $� #�i "�E !�# � �d �H �- � �q �Q �3 � �| �b �G �3 � � �t �c �L � �~ �` �< � ! W O� u � ' � d � J � � L�\���\�e �X�=�g � � W O�<]GyBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�;S}yCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�:]�yBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��9]�YyBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�8]5yBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�7U5yBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �6S�KyCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�5O�1yPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�4U]yBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�3U5yBill Nottingham <notting@redhat.com>7��@- initscript munging`�2UqyBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�1G�yJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�0UWyBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �/G�wyJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�.U9yBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�-GqyJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�,M�wyStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�+U�yBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��*S�;yCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�)S{yCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�(OayPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�'S'yCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�&SyCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�%GkyJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�$G�yJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�#GkyJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��"G�AyJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�!G3yJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� � O�oyManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)� ]�yyScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�!� �'� xJuan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�1� �'�=xDmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�-� ��ExJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9 $ s �5�C � � � 8 d � � 6��]#��#�R�C�0�j ��q( � s ?�`]'yBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�_]�yBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�^]5yBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�]] yBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�\]gyBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�[]�wyBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�Z]AyBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�Y]_yBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��X]�/yBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�W] yBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �V]�ayBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�U]�yBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�TM�{yKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�S]uyBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�R]yBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��Q]�IyBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�P]�yBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�O]'yBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�N];yBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�M]yBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�L]!yBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�KM3yProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�JeOyFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�IekyFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�HY7yTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�GQ�)yNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�F[�IyBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��EU�=yBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�DQ�CyNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�C]-yBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�BQ=yNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�AQ�{yNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�@[WyBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��?[�SyBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�>U_yBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�=K�yElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user. E g �V � d l � e I��_�V��Z��� $ � E ��~y�'yBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�}y!yBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�|y�syBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�{m�eyBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�zm�)yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�ym�yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�xe?yFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�wyyBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�vyUyBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�uy+yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�ty{yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�sy�yBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�ryOyBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�qm�YyBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�py!yBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�omyBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�noCyBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�mm�5yBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�l]5yBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�kQEyNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�j]qyBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�i]MyBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�h]�yBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�g]�yBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�f]�yBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�e]�-yBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�d]iyBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�c]kyBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�bY;yTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��a]�QyBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890 ! � X��H � � { D � � � � Z �_�JJ�vD��N��T � s� ]� yDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF� ]5yDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH� ]9yDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI� ];yDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�]iyDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�]/yDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�]/yDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�_uyDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�E yTim Powers <timp@redhat.com>>.��- rebuilt\�__yDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�c�yNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�_� yDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�_gyDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�]eyDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�MUyKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�]SyKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�]�SyKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�m%yBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759� E3yTim Powers <timp@redhat.com>=@- automated rebuild9� E3yTim Powers <timp@redhat.com><��- automated rebuild�7� m�yBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O� e?yFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb� m]yBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�m�}yBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��[�MyElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�mwyBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�EEyTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�E3yTim Powers <timp@redhat.com><<0�- automated rebuildA�myBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�{#yBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�yCyBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`� yMyBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�y�SyBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. - � �h�j � g 2 � � ' � � � o � 4��@�|2��D��u1��K�f�B�}H � � N�L_CyDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�K_GyDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�JK yElliot Lee <sopwith@redhat.com>@��- rebuiltq�I_�yDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�H_CyDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�G_EyDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�F_�yDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�E__yDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��D_�1yDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�C]YyDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�BK yElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�AeIyFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�@GmyTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�?]+yDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�>K yElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�=]7yDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�<]CyDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�;]/yDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�:]kyDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�9]+yDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�8e/yDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�7cOyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�6eqyFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�5cEyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�4c#yDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�3cWyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�2cyyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�1coyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�0ceyDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�/_WyDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�._=yDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�-_}yDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�,_GyDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�+_=yDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�*_}yDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�)_=yDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�(_?yDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�'K yElliot Lee <sopwith@redhat.com>>��@- rebuiltL�&_?yDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�%_�yDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�$_?yDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�#_?yDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�"_ayDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�!]?yDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG� ]7yDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup J � �R � j � % � K * ��?x�K����` J ��ck�=yJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�be�yJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�ak�yJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�`k�1yJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�_k�yyJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�^s�kyJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�]s� yJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�\{�[yJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�[{�yJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�Z{WyJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�Ys�cyJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��XQ�UyJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �WQ�myJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�VQoyJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�UQ�!yJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�TQ�yJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�SQ�MyJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�RQuyJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��QQ�5yJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�PQ}yJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�OQQyJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�NQ�}yJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�M_;yDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3 n K � s _ � � ���xp�b n �p�tm�wyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�sm�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �rm�+yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��qm� yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�pk�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�ok�WyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�nk� yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�ms)yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�lk�iyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�ku�eyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�js�YyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�is�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�hq�kyJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�gqWyJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�fqmyNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�eqayJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�dq�uyJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � | � 4 � 0 � � � 6�@�q�Wj �� � �r� m�{yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� � m�)yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc� m_yJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�k�]yJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�kSyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�k�kyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�qcyJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�k�qyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�mWyFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�okyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��k�AyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[� kQyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��q�yJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�~S yJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �}o�SyJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��|m�AyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�{m�oyJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�zm�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�ycAyTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�xm� yJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �wm�/yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�vm�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �um�yJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. } U � � � Q ���B���"�< } �;� s�yMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�sGyMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��s�yMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��m�yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�skyFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�m�yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��m�9yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�yAyMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�uYyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�{ yJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�u�GyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�m�yJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�m?yJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�m�YyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�m�yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)�� m�!yJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'� m�eyJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition \ � � � � M ��!| a�}�0�( � \ `�3ccyAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�2coyAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�1c�yAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��0c�CyAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�/c�1yAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�.c� yAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�-c�yAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�,c}yAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�+c�oyAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�*qoyMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�)q�UyMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��(q� yMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�'}�_yMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�&q�UyMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �%q�%yMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��$q� yMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�#q�uyMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��"q�?yMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�!qcyMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}� s� yMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� � s�)yMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|� s� yMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^� sOyMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage K +3 = � B -��3a�;1���I � K q�Gc�yAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��F_�1yAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�Ec�yAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�D_�KyAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�C_EyAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�B[�7yAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��A[�5yAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�@[�yAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�?[�syAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�>[�EyAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�=cMyAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�<cyyAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�;c�yAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��:c�CyAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��9c�-yAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�8cyAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�7c�%yAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�6c�yyAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�5c� yAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�4c�CyAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0) J �d � Y � U � @ � , ����>�r�5�c d � � J [�bgUyAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�agAyAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�`cmyAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��_g�MyAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�^ccyAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�]cQyAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�\c� yAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��[g�9yAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�Zc�oyAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��Yg�=yAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�Xg�iyAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �Wg�1yAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�Vg� yAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�Uc�yAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�Tg�yAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�Sc�+yAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�ReuyAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�Qa�yAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�PeYyAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�OeeyAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�Na�{yAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�MmUyWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �La�ayAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�K_�iyAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�JcgyAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�I_{yAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�Hc�wyAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful) U �a � 4 � 7 7 � � 2 � �E�8� �@�N � � U _�|g]yAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�{g%yAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�zg;yAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�ycSyAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��xc�GyAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�wc�=yAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j�vc�uyAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��uc�-yAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�tc�uyAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �sc�[yAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�rcuyAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�qceyAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�pceyAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��og�-yAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��ng�GyAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�mcEyAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�l�1yRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�kg-yAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�jg�yAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �ig�7yAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�hgqyAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�gc�yAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�fc� yAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�eg�wyAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��dg�KyAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�cg?yAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS � �4 � � ; � m � k � n �L�+��O�q�=�i� � �9�e�yAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��i� yAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�ieyAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�iqyAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�e}yAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�e� yAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�e�yAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�ekyAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�eqyAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�e�yAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�e}yAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~� i�yAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� � e�WyAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd� amyAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`� ]iyAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U� aOyAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�aYyAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �a�[yAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�]�yAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��e�#yAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�ekyAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�icyAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�e�gyAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�c�?yAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{� g�yAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��c�?yAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�~gKyAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�}c�YyAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch � ���% � � � ? � � > � T�S�_� �|`|0= � �"�3[�myAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�2[�yAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�1g1yAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�0i�[yMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��/i�KyMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��.e�%yAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��-g�GyAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�,c�=yAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�+cyAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �*a�7yAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�)akyAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�(agyAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��'�!�yFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �&e�7yMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�%sAyCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�$aGyAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�#aQyAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�"[MyAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�!gqyAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm� kuyMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~� k�yAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#� g�cyAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_� i[yAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f� emyAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�eGyAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��i�MyAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�e�yAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD x ;�? � E � I � R � l �{�c ��bq�C�� � x t�Qa� yAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��Pa�QyAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�Oa{yAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�Na5yAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�M_EyJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�L_�!yJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�K[[yAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�J[�yAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�I[;yAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �Hi�yAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�Gi5yAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Fi]yAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Ei�'yAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �Di�/yAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�Ce3yAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�BeMyAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Ae3yAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �@e�_yAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�?e� yAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�>e�yAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�=e3yAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�<e�SyAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��;e�IyAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�:a�kyAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�9gAyTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�8e�yMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��7a�%yAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��6� �yFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�5[eyAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�4[�+yAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �U7 � U � I � J � � l� 4�M���)��\ � � a�qgayAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�pgUyAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�og5yAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�n[�[yAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �m�+�yFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�lgyyAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�ke=yAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�je�ayAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�ieyAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�he3yAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�gc� yAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�fakyAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�ea5yAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��de�'yJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�ca� yAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �ba�[yAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�aa}yAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�`a�WyAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�_a5yAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�^[/yAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�]g5yAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��\e�%yAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�[e� yAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�ZaqyAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�YaUyAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�Xa�yAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�Wa5yAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�V[wyAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�Ug� yAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��Te�SyAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�Sc[yAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�Rc5yAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2 K �+�b � \ � e e ��Q��(�[�]���H�6 � K y�[�yAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�[�yAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��[�MyAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y� [�yAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V� [WyAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� � [�AyAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ� gSyAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"�� g�'yAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�g�yAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�g5yAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�eWyAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �e�WyAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�eWyAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell�eyyAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�[qyAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�[yyAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V� [WyAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�[�uyAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�~g�yAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�}g�eyAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�|g�qyAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�{aCyAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��za�%yAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�ya�yAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�xa=yAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�waWyAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX�vaUyAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�uaUyAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�tY�yDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�s[myAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�rg{yAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver) � y � � � D � X � 6��A�u��c��+ � c�-m_yTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��,m�9yTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�+m�3yTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �*m�/yTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�)g� yAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�(gOyAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�'g�yAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�&i�yTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�%cYyAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��$i�!yTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�#a� yAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�"aGyAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�!g�yTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g� a�qyAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP� g?yTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1�� [�3yAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN� [GyAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE� [5yAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��[�WyAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�c?yAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�g�9yTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �g� yTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�giyTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�g� yTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�a5yAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���%�yFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�s}yVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�aUyAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��[�/yAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch merged � _�k < � S � A � h 4���=�� ��ve � L�Hk3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�GgIyTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Fg�7yTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Eg� yTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�Dg�OyTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�Ce?yDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�BgiyHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Ac3yTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�@cqyTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�?e?yDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�>a� yTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�=a�yTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�<a�cyTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��;a�'yTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�:a�UyTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�9aMyTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�8a�yTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�7aiyTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��6a�?yTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�5g�yTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�4gsyTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�3g�yTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�2g�OyTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�1g=yTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �0g�7yTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�/aeyTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �.a�]yTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20 u �M � . � < � � 6 � � O����h+z�|� � u v�do�yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �co�SyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��bo� yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�aoWyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�`oKyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �_o�OyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�^o�oyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�]o�myPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�\g3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�[g3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�Zg�+yTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�YgMyTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�Xg�_yTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�Wg�wyTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�VgWyTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�Ug3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�Tg3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�Sg3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�RgqyTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�Qg3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�Pg3yTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�OgmyTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��Ng�%yTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�Mg�wyTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�Lg� yTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�KgkyTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�Jg�oyTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��Ig�!yTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066) � {�| � 8 � J � k � � ~ -�/�A�0�E����� �& � }�u� yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�u�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�u[yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��u�1yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b� u�SyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�o[yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�~o�syPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�}o3yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�|o;yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�{oiyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�zo� yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�yooyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �xo�QyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�wo�yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i�voiyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��uo� yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�tuuyMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�so3yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�ro[yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�qo�yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�poUyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�oogyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�noayPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�moyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�lo� yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�kosyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�jouyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�ioWyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�hooyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�goyyPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��fo�#yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��eo�yPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315) G �%�H � n � � � ) { � y��T�g��%��� G �>�#}�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��"{�7yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�!{cyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p� {kyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� � {�#yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c� wUyTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�wuyTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�{�{yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�{WyArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!yArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�wCyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�w�cyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�w�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�wqyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�w}yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��}�yMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�s�eyTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�wsyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�wiyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|� w�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o� wmyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l� wgyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn� soyPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f� w[yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�u3yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��u�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�uwyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�uUyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661) " � c�` � N � � = � | # � } %�5��|5�>�v1��@�Z � � e�ES}zCristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�D]�zBernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��C]�YzBernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�B]5zBernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�AU5zBill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �@S�KzCristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�?O�1zPreston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�>U]zBill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�=U5zBill Nottingham <notting@redhat.com>7��@- initscript munging`�<UqzBill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�;G�zJeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�:UWzBill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �9G�wzJeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�8U9zBill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�7GqzJeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�6M�wzStepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�5U�zBill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��4S�;zCristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�3S{zCristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�2OazPreston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�1S'zCristian Gafton <gafton@redhat.com>6�G�- version 8.2f�0SzCristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�/GkzJeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�.G�zJeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�-GkzJeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��,G�AzJeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�+G3zJeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �*O�ozManuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�)]�yzScott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �(�yLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �'q�yStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �&}�!yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�%}gyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��$}�9yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) $ c �=�J � � � = q � � L��J ��C�< �����k�] � c p�i]�zBernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�h]5zBernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�g] zBernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�f]gzBernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�e]�wzBernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�d]AzBernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�c]_zBernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��b]�/zBernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�a] zBernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �`]�azBernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�_]�zBernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�^M�{zKarsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�]]uzBernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�\]zBernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��[]�IzBernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�Z]�zBernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�Y]'zBernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�X];zBernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�W]zBernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�V]!zBernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�UM3zProspector <bugzilla@redhat.com>9l]�- automatic rebuildW�TeOzFlorian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�SekzFlorian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�RY7zTrond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�QQ�)zNalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�P[�IzBernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��OU�=zBill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�NQ�CzNalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�M]-zBernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�LQ=zNalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�KQ�{zNalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�J[WzBernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��I[�SzBernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�HU_zBill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�GK�zElliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�F]GzBernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021) � �%�w M � " * � n # � �j xK��J��� � � J�y!zBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�y�szBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�m�ezBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�m�)zBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�m�zBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�e?zFlorian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�yzBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d� yUzBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�y+zBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�~y{zBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�}y�zBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�|yOzBernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�{m�YzBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�zy!zBernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�ymzBernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�xoCzBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�wm�5zBernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F�v]5zBernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�uQEzNalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�t]qzBernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�s]MzBernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�r]�zBernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�q]�zBernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�p]�zBernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�o]�-zBernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�n]izBernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�m]kzBernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�lY;zTrond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��k]�QzBernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�j]'zBernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 final ! y n�c � r 6 � � � M � @ �%�|��C��H�Y � y F�(]5zDaniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�']9zDaniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�&];zDaniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�%]izDaniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�$]/zDaniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�#]/zDaniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�"_uzDaniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�!E zTim Powers <timp@redhat.com>>.��- rebuilt\� __zDaniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer� c�zNalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|� _� zDaniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`� _gzDaniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^� ]ezDaniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�MUzKarsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�]SzKarsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�]�SzKarsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�m%zBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�E3zTim Powers <timp@redhat.com>=@- automated rebuild9�E3zTim Powers <timp@redhat.com><��- automated rebuild�7�m�zBernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�e?zFlorian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�m]zBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�m�}zBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��[�MzElliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�mwzBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�EEzTim Powers <timp@redhat.com><QH�- rebuild against new libssl9�E3zTim Powers <timp@redhat.com><<0�- automated rebuildA� mzBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L� {#zBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[� yCzBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`� yMzBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$� y�SzBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��y�'zBernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257) - �@��C � @ � � m � c � T � � ,�a �_�x�~4��a �z�� �{ � P�U_GzDaniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�TK zElliot Lee <sopwith@redhat.com>@��- rebuiltq�S_�zDaniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�R_CzDaniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�Q_EzDaniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�P_�zDaniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�O__zDaniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��N_�1zDaniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�M]YzDaniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�LK zElliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�KeIzFlorian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�JGmzTim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�I]+zDaniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�HK zElliot Lee <sopwith@redhat.com>@,�@- rebuiltG�G]7zDaniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�F]CzDaniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�E]/zDaniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�D]kzDaniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�C]+zDaniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�Be/zDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�AcOzDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�@eqzFlorian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�?cEzDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�>c#zDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�=cWzDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�<cyzDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�;cozDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�:cezDaniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�9_WzDaniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�8_=zDaniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�7_}zDaniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�6_GzDaniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�5_=zDaniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�4_}zDaniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�3_=zDaniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�2_?zDaniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�1K zElliot Lee <sopwith@redhat.com>>��@- rebuiltL�0_?zDaniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�/_�zDaniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�._?zDaniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�-_?zDaniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�,_azDaniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�+]?zDaniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�*]7zDaniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�)]� zDaniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threads �b�h | H � Z � � DW�'z�I�E� x�le�zJason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�kk�zJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�jk�1zJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�ik�yzJason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�hs�kzJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�gs� zJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�f{�[zJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�e{�zJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�d{WzJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�cs�czJason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��bQ�UzJason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �aQ�mzJason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�`QozJason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�_Q�!zJason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�^Q�zJason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�]Q�MzJason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�\QuzJason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��[Q�5zJason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�ZQ}zJason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�YQQzJason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�XQ�}zJason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�W_;zDaniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�V_CzDaniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps L � 5 � ] � I � �� ���bZ � L }�}m�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �|m�+zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��{m� zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�zk�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�yk�WzJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�xk� zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�ws)zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h�vk�izJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�uu�ezJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�ts�YzJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�ss�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�rq�kzJason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qqWzJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�pqmzNalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�oqazJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�nq�uzJason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��mk�=zJason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � @ � , < � �B�L�}�cv�� � � �m�)zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�m_zJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�k�]zJason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�kSzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�k�kzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�qczJesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�k�qzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_� mWzFlorian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj� okzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders�� k�AzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[� kQzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today�� q�zJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�S zJesse Keating <jkeating@redhat.com>C�q�- rebuilt� �o�SzJason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��m�AzJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�m�ozJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�m�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�cAzTomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�m� zJason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �m�/zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx� m�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �m�zJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�~m�wzJason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled F _ � � � [ � �L�� �, � F Z�%sGzMartin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��$s�zMartin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��#m�zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�"skzFlorian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�!m�zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.�� m�9zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ� yAzMatthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd� uYzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ� { zJesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\� u�GzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�m�zJeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�m?zJeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�m�YzJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�m�zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��m�!zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�m�ezJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�m�{zJason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc i A�a � Q � M � \�b�M�2�=q � i p�;c�zAdam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��:c�CzAdam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�9c�1zAdam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�8c� zAdam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�7c�zAdam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�6c}zAdam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�5c�ozAdam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�4qozMartin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�3q�UzMartin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��2q� zMartin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�1}�_zMartin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�0q�UzMartin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �/q�%zMartin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��.q� zMartin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�-q�uzMartin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��,q�?zMartin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�+qczMartin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�*s� zMartin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �)s�)zMartin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�(s� zMartin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�'sOzMartin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�&s�zMartin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context } �4_ g 7 q v a-�g��oe� � } q�Oc�zAdam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�N_�KzAdam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�M_EzAdam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�L[�7zAdam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��K[�5zAdam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�J[�zAdam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�I[�szAdam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�H[�EzAdam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�GcMzAdam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�FcyzAdam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Ec�zAdam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��Dc�CzAdam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��Cc�-zAdam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�BczAdam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Ac�%zAdam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�@c�yzAdam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�?c� zAdam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�>c�CzAdam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�=cczAdam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�<cozAdam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995) f v � f [ � W � B � .����@�t�7�e f ��ig�MzAdam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�hcczAdam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�gcQzAdam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�fc� zAdam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��eg�9zAdam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�dc�ozAdam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��cg�=zAdam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�bg�izAdam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �ag�1zAdam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�`g� zAdam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�_c�zAdam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�^g�zAdam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�]c�+zAdam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�\euzAdam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�[a�zAdam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�ZeYzAdam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�YeezAdam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�Xa�{zAdam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�WmUzWarren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �Va�azAdam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�U_�izAdam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�TcgzAdam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�S_{zAdam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�Rc�wzAdam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�Qc�zAdam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��P_�1zAdam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856) � �D�� � G � � � l ��+� p�x& � ��c�GzAdam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N�c�=zAdam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j� c�uzAdam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��c�-zAdam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�~c�uzAdam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �}c�[zAdam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�|cuzAdam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�{cezAdam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�zcezAdam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��yg�-zAdam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��xg�GzAdam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�wcEzAdam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�v�1zRelease Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�ug-zAdam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�tg�zAdam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �sg�7zAdam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�rgqzAdam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�qc�zAdam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�pc� zAdam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�og�wzAdam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��ng�KzAdam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�mg?zAdam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�lgUzAdam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�kgAzAdam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�jcmzAdam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191) � �T� � s � b � � � � w�_�X�ff�� Z�| � ��!i� zAdam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d� iezAdam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj� iqzAdam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn� e}zAdam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?� e� zAdam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs� e�zAdam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�ekzAdam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�eqzAdam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�e�zAdam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�e}zAdam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~�i�zAdam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �e�WzAdam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd�amzAdam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`�]izAdam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U�aOzAdam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ�aYzAdam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �a�[zAdam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�]�zAdam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��e�#zAdam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�ekzAdam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c� iczAdam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$� e�gzAdam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O� c�?zAdam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{� g�zAdam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)�� c�?zAdam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�gKzAdam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�c�YzAdam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�g]zAdam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�g%zAdam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�g;zAdam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX�cSzAdam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159) � �D � Q � � _ � n � U �z�"��F?#? � I�;g1zAdam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�:i�[zMartin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��9i�KzMartin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��8e�%zAdam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��7g�GzAdam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�6c�=zAdam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn�5czAdam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �4a�7zAdam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�3akzAdam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�2agzAdam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��1�!�zFedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �0e�7zMartin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�/sAzCaolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�.aGzAdam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�-aQzAdam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�,[MzAdam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�+gqzAdam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�*kuzMartin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�)k�zAdam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�(g�czAdam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�'i[zAdam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�&emzAdam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�%eGzAdam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��$i�MzAdam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�#e�zAdam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�"e�zAdam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet _ g � B � ! � X � �m�w��.�T�g��} � � _ H�Xa5zAdam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�W_EzJan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�V_�!zJan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�U[[zAdam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�T[�zAdam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�S[;zAdam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �Ri�zAdam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�Qi5zAdam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Pi]zAdam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Oi�'zAdam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �Ni�/zAdam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�Me3zAdam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�LeMzAdam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Ke3zAdam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �Je�_zAdam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�Ie� zAdam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�He�zAdam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�Ge3zAdam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�Fe�SzAdam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��Ee�IzAdam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�Da�kzAdam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�CgAzTomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�Be�zMartin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��Aa�%zAdam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��@� �zFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�?[ezAdam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�>[�+zAdam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�=[�mzAdam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�<[�zAdam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms ���4 � � > � � � 2 � Q�|7������N��j� � �w�+�zFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�vgyzAdam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�ue=zAdam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�te�azAdam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�sezAdam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�re3zAdam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�qc� zAdam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�pakzAdam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�oa5zAdam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��ne�'zJan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu�ma� zAdam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �la�[zAdam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�ka}zAdam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�ja�WzAdam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�ia5zAdam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�h[/zAdam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�gg5zAdam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��fe�%zAdam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�ee� zAdam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�daqzAdam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�caUzAdam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�ba�zAdam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�aa5zAdam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�`[wzAdam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�_g� zAdam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��^e�SzAdam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�]c[zAdam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�\c5zAdam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�[a� zAdam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��Za�QzAdam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�Ya{zAdam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDB [ #�w � > � u � o � x & x�d �;�n�p"�!� � [ V�[WzAdam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �[�AzAdam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ�gSzAdam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��g�'zAdam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu�g�zAdam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�g5zAdam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�eWzAdam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �e�WzAdam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�eWzAdam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell� eyzAdam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc� [qzAdam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg� [yzAdam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V� [WzAdam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&� [�uzAdam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�g�zAdam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�g�ezAdam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�g�qzAdam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�aCzAdam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��a�%zAdam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o�a�zAdam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL�a=zAdam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY�aWzAdam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX� aUzAdam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X�aUzAdam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�~Y�zDan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�}[mzAdam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�|g{zAdam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�{gazAdam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�zgUzAdam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�yg5zAdam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�x[�[zAdam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings �� | ! � � � G�[�9��D�x�� f � � �4m�/zTomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�3g� zAdam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�2gOzAdam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�1g�zAdam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�0i�zTomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�/cYzAdam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��.i�!zTomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�-a� zAdam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ�,aGzAdam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�+g�zTomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�*a�qzAdam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�)g?zTomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��([�3zAdam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�'[GzAdam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�&[5zAdam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��%[�WzAdam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�$c?zAdam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�#g�9zTomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �"g� zTomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�!gizTomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6� g� zTomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH� a5zAdam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2�� �%�zFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu� s}zVille Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X� aUzAdam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��[�/zAdam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�[�zAdam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�[�zAdam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��[�MzAdam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�[�zAdam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0) � . � � � � s �����a}�B��;�� � �Y�Ng�OzTomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�Me?zDaniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�LgizHonza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Kc3zTomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�JcqzTomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�Ie?zDaniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~�Ha� zTomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�Ga�zTomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�Fa�czTomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��Ea�'zTomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�Da�UzTomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�CaMzTomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�Ba�zTomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�AaizTomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��@a�?zTomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�?g�zTomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�>gszTomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�=g�zTomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�<g�OzTomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�;g=zTomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �:g�7zTomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�9aezTomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �8a�]zTomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�7m_zTomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��6m�9zTomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�5m�3zTomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) I �t � � � � � s �o�i �L�M�5��G � I Z�joKzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �io�OzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�ho�ozPetr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�go�mzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�fg3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�eg3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�dg�+zTomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W�cgMzTomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�bg�_zTomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�ag�wzTomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�`gWzTomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�_g3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�^g3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�]g3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�\gqzTomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�[g3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�Zg3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�YgmzTomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��Xg�%zTomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�Wg�wzTomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�Vg� zTomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�UgkzTomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�Tg�ozTomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��Sg�!zTomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�Rk3zTomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�QgIzTomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Pg�7zTomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Og� zTomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �r � t � u � 1 � C � d���w&�(�:�)�>���� � �b� u�SzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb� o[zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�o�szPetr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�o3zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�o;zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�oizPetr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�o� zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l�oozPetr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �o�QzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)�o�zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i� oizPetr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��o� zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�~uuzMartin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�}o3zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�|o[zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�{o�zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�zoUzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�yogzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�xoazPetr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�wozPetr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�vo� zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�uoszPetr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�touzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�soWzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�roozPetr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�qoyzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��po�#zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��oo�zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�no�zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �mo�SzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��lo� zPetr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�koWzPetr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) � k� � * � M � s � � .��~��Y�l�*� � � �){�#zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��({�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��'{�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�&wUzTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�%wuzTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�${�{zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�#{WzArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �"{�!zArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�!wCzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+� w�czPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z� w�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q� wqzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w� w}zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��}�zMiroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�s�ezTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�wszPetr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�wizPetr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�w�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o�wmzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l�wgzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn�sozPavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f�w[zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q�u3zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��u�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�uwzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�uUzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�u� zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){� u�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e� u[zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool�� u�1zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package � � � � $ � ! � b � ���=�{>��}�=�U��7�� � �>�IO�1{Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�HU]{Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�GU5{Bill Nottingham <notting@redhat.com>7��@- initscript munging`�FUq{Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�EG�{Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�DUW{Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �CG�w{Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�BU9{Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�AGq{Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�@M�w{Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)v�?U�{Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��>S�;{Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�=S{{Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�<Oa{Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�;S'{Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�:S{Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�9Gk{Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�8G�{Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�7Gk{Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��6G�A{Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�5G3{Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �4O�o{Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�3]�y{Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� �2�zLinar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �1q�zStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �0}�!zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�/}gzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��.}�9zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�-}�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��,{�7zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�+{czPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�*{kzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # � o*�D � l � O � ] 5 � ��R~ �P��w=��=�l]�J � ��l]�/{Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�k] {Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �j]�a{Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�i]�{Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�hM�{{Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�g]u{Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�f]{Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��e]�I{Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�d]�{Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�c]'{Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�b];{Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup7�a]{Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�`]!{Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�_M3{Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�^eO{Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�]ek{Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�\Y7{Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�[Q�){Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�Z[�I{Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��YU�={Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�XQ�C{Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�W]-{Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�VQ={Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�UQ�{{Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�T[W{Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��S[�S{Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�RU_{Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�QK�{Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�P]G{Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�OS}{Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�N]�{Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��M]�Y{Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�L]5{Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�KU5{Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �JS�K{Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. ! �S�E � K p & � _ � mu �n%R��h�_� �c�� u� m�{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O� e?{Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey� y{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d� yU{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O� y+{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�y{{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�y�{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�yO{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�m�Y{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.J�y!{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V�oC{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O�m�5{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F� ]5{Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H�QE{Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd�~]q{Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�}]M{Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�|]�{Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�{]�{Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�z]�{Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�y]�-{Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�x]i{Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�w]k{Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�vY;{Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��u]�Q{Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�t]'{Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�s]�{Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�r]5{Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�q] {Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�p]g{Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�o]�w{Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�n]A{Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�m]_{Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set { � � 1 � & � y 5 � � B�u���B��?�{ { �|�(_� {Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�'_g{Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�&]e{Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�%MU{Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�$]S{Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�#]�S{Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)F�"m%{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�!E3{Tim Powers <timp@redhat.com>=@- automated rebuild9� E3{Tim Powers <timp@redhat.com><��- automated rebuild�7� m�{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O� e?{Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb� m]{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3� m�}{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��[�M{Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�mw{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�EE{Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�E3{Tim Powers <timp@redhat.com><<0�- automated rebuildA�m{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�{#{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[�yC{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`�yM{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$�y�S{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��y�'{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J�y!{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�y�s{Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�m�e{Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�m�){Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) . � �,��J � U � K � S � � } .�r$�c�V�"�� �}9��?��|" � � 2�VK {Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�UeI{Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�TGm{Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�S]+{Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�RK {Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�Q]7{Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�P]C{Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�O]/{Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�N]k{Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�M]+{Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�Le/{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�KcO{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�Jeq{Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�IcE{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Hc#{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try againZ�GcW{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�Fcy{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�Eco{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�Dce{Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�C_W{Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�B_={Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�A_}{Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�@_G{Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�?_={Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�>_}{Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�=_={Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�<_?{Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�;K {Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�:_?{Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�9_�{Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�8_?{Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�7_?{Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�6_a{Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�5]?{Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�4]7{Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�3]� {Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�2]5{Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�1]9{Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�0];{Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�/]i{Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�.]/{Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�-]/{Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�,_u{Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�+E {Tim Powers <timp@redhat.com>>.��- rebuilt\�*__{Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�)c�{Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � ��I � � 2 � � Y c � & ��~�����$� � �-�rs�k{Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�qs� {Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�p{�[{Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�o{�{Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�n{W{Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�i�ms�c{Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��lQ�U{Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �kQ�m{Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�jQo{Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�iQ�!{Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�hQ�{Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�gQ�M{Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�fQu{Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��eQ�5{Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�dQ}{Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�cQQ{Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�bQ�}{Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�a_;{Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�`_C{Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�__G{Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�^K {Elliot Lee <sopwith@redhat.com>@��- rebuiltq�]_�{Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�\_C{Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�[_E{Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�Z_�{Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�Y__{Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��X_�1{Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�W]Y{Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context � L � A � � � � #��k���� � �_�k�W{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y�k� {Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K�s){Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h� k�i{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�+�u�e{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$�~s�Y{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�}s�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�|q�k{Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�{qW{Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�zqm{Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�yqa{Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�xq�u{Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��wk�={Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�ve�{Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7�uk�{Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�tk�1{Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�sk�y{Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � ~ � p | � } m�^��p7�T�O�=� g�qc{Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�k�q{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�mW{Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�ok{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��k�A{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[�kQ{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��q�{Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6�S {Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �o�S{Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��m�A{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�m�o{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�m�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO� cA{Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9� m� {Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� � m�/{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx� m�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� � m�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�m�w{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�m�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �m�+{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��m� {Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�{Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) � � � ( � ��qqL�{�N � � Z�)yA{Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�(uY{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�'{ {Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�&u�G{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesx�%m�{Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�$m?{Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�#m�Y{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�"m�{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��!m�!{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'� m�e{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r� m�{{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� � m�){Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc� m_{Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"� k�]{Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�kS{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�k�k{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � 1 � = � W � 7 � (�>�o�X�C � ��<q� {Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�;}�_{Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�:q�U{Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �9q�%{Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��8q� {Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�7q�u{Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��6q�?{Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�5qc{Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�4s� {Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �3s�){Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�2s� {Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�1sO{Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�0s�{Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�/sG{Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��.s�{Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��-m�{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�,sk{Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�+m�{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��*m�9{Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � [�@ � \ � z � ; fn>x}h4�n� � �%�S[�s{Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�R[�E{Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�QcM{Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�Pcy{Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Oc�{Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��Nc�C{Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��Mc�-{Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�Lc{Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Kc�%{Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�Jc�y{Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�Ic� {Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Hc�C{Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�Gcc{Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�Fco{Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�Ec�{Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Dc�C{Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Cc�1{Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Bc� {Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Ac�{Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�@c}{Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�?c�o{Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�>qo{Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�=q�U{Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. � � y . � � �d���I�8�t�R�H � �8�ic�{Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�hg�{Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�gc�+{Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�feu{Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�ea�{Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�deY{Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCb�cee{Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�ba�{{Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�amU{Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �`a�a{Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�__�i{Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�^cg{Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�]_{{Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�\c�w{Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�[c�{Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��Z_�1{Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�Yc�{Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�X_�K{Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�W_E{Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�V[�7{Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��U[�5{Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�T[�{Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist � E� y � < � j k � Q�c�����>���^��* � � �c�[{Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i�cu{Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a�ce{Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a�ce{Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283��g�-{Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��g�G{Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�cE{Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d� �1{Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�g-{Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�~g�{Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)� �}g�7{Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i�|gq{Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r�{c�{Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4�zc� {Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-�yg�w{Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��xg�K{Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP�wg?{Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[�vgU{Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�ugA{Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�tcm{Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��sg�M{Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�rcc{Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�qcQ{Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�pc� {Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��og�9{Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�nc�o{Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��mg�={Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�lg�i{Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �kg�1{Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�jg� {Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) H R� Z q � =�Q� X�����3�i � H ~�!i�{Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� � e�W{Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd� am{Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`� ]i{Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U� aO{Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ� aY{Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �a�[{Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y�]�{Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��e�#{Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee�ek{Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c�ic{Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�$�e�g{Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�c�?{Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�g�{Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��c�?{Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�gK{Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�c�Y{Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_�g]{Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C�g%{Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN�g;{Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX� cS{Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)�� c�G{Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N� c�={Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j� c�u{Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in�� c�-{Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*�c�u{Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 i ��$ � F � � > � {�_ �>�&�f �_�2�h � i n�?c{Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �>a�7{Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc�=ak{Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea�<ag{Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��;�!�{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �:e�7{Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW�9sA{Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ�8aG{Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV�7aQ{Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q�6[M{Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei�5gq{Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm�4ku{Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends~�3k�{Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#�2g�c{Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_�1i[{Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f�0em{Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS�/eG{Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��.i�M{Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|�-e�{Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9�,e�{Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��+i� {Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d�*ie{Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj�)iq{Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn�(e}{Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?�'e� {Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs�&e�{Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e�%ek{Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h�$eq{Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|�#e�{Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n�"e}{Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter) � .� � r � B O ����c���Y��;��p$ � � �Xi�/{Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI�We3{Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V�VeM{Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI�Ue3{Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� �Te�_{Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys�Se� {Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq�Re�{Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I�Qe3{Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z�Pe�S{Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��Oe�I{Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�$�Na�k{Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ�MgA{Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr�Le�{Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��Ka�%{Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��J� �{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]�I[e{Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A�H[�+{Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"�G[�m{Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o�F[�{Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI�Eg1{Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`�Di�[{Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��Ci�K{Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��Be�%{Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��Ag�G{Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N�@c�={Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set � v� � u � ) � V � � ?��I���=�\��B�� � u�wa� {Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �va�[{Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�ua}{Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z�ta�W{Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH�sa5{Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B�r[/{Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K�qg5{Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��pe�%{Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu�oe� {Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf�naq{Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX�maU{Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y�la�{Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgH�ka5{Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f�j[w{Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv�ig� {Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��he�S{Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\�gc[{Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI�fc5{Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t�ea� {Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��da�Q{Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k�ca{{Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH�ba5{Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O�a_E{Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~�`_�!{Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X�_[[{Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m�^[�{Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH�][;{Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� �\i�{Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL�[i5{Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`�Zi]{Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��Yi�'{Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) L x-�F � � � � " � � U � � "�P��>�}���P���! � L l�ey{Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc�[q{Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�[y{Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�[W{Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�[�u{Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�g�{Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�g�e{Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*�g�q{Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO�aC{Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��a�%{Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)o� a�{Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL� a={Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY� aW{Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX� aU{Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X� aU{Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k�Y�{Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a�[m{Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn�g{{Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a�ga{Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[�gU{Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK�g5{Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�[�[{Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��+�{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm� gy{Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�e={Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�~e�a{Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo�}e{Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI�|e3{Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~�{c� {Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c�zak{Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH�ya5{Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��xe�'{Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript ��V � U � � � } � �8�N�,�����Q�u� � Q�6aG{Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3�5g�{Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g�4a�q{Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP�3g?{Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1��2[�3{Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN�1[G{Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE�0[5{Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��/[�W{Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN�.c?{Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N�-g�9{Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� �,g� {Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e�+gi{Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�6�*g� {Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH�)a5{Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2��(�%�{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu�'s}{Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X�&aU{Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��%[�/{Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy�$[�{Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l�#[�{Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��"[�M{Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y�![�{Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V� [W{Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� � [�A{Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ� gS{Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"�� g�'{Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu� g�{Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K�g5{Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[�eW{Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �e�W{Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[�eW{Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devel R ��, v � > ) � "�.�����+��q� � R ~�Ra� {Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6�Qa�{Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`�Pa�c{Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��Oa�'{Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y�Na�U{Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T�MaM{Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q�La�{Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b�Kai{Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��Ja�?{Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}�Ig�{Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj�Hgs{Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confy�Gg�{Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y�Fg�O{Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO�Eg={Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� �Dg�7{Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`�Cae{Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �Ba�]{Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c�Am_{Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��@m�9{Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N�?m�3{Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �>m�/{Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x�=g� {Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X�<gO{Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2�;g�{Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t�:i�{Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[�9cY{Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��8i�!{Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u�7a� {Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdir � �D��? b � � ~ / )|N]�k �e�~ � � W�mgM{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!�lg�_{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m�kg�w{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\�jgW{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J�ig3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J�hg3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J�gg3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i�fgq{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J�eg3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J�dg3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g�cgm{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��bg�%{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m�ag�w{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�A�`g� {Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f�_gk{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)�^g�o{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��]g�!{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L�\k3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U�[gI{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� �Zg�7{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x�Yg� {Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y�Xg�O{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O�We?{Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e�Vgi{Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H�Uc3{Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g�Tcq{Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O�Se?{Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27 � 5�� � � Y � � n � p�q�-�?�`���s"�$�6 � � � o�Q{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� o�{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i� oi{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)�� o� {Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser�uu{Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN�o3{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b�o[{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7�o�{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_�oU{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh�og{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�oa{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�o{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z� o� {Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�os{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)o�~ou{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`�}oW{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l�|oo{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q�{oy{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��zo�#{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��yo�{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v�xo�{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �wo�S{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��vo� {Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�uoW{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z�toK{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �so�O{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-�ro�o{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l�qo�m{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J�pg3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J�og3{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G�ng�+{Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506) n ��Q M � m � � ,�O�u��0����� [ � n � �,{�!{Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z�+wC{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+�*w�c{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z�)w�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q�(wq{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��'w�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w�&w}{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��%}�{Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*�$s�e{Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr�#ws{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m�"wi{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|�!w�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o� wm{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)l� wg{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn� so{Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f� w[{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q� u3{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��u�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s�uw{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b�uU{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}�u� {Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){�u�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e�u[{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��u�1{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�u�S{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�o[{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�o�s{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�o3{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R�o;{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi�oi{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|�o� {Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l� oo{Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091) � ��$ � 7 � � = � � C�@�.({���V��W�� � v�JU�|Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��IS�;|Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbindd�HS{|Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)U�GOa|Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.:�FS'|Cristian Gafton <gafton@redhat.com>6�G�- version 8.2f�ES|Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1V�DGk|Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restarte�CG�|Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.V�BGk|Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��AG�A|Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post:�@G3|Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �?O�o|Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�)�>]�y|Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>��=� �i{Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �<�{Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� �;q�{Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� �:}�!{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o�9}g{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��8}�9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>�7}�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��6{�7{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l�5{c{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p�4{k{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �3{�#{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��2{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��1{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c�0wU{Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s�/wu{Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y�.{�{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f�-{W{Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers " � �y � � � u Z � � ; � .�t���H7��Z�P � � 7�l]|Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4<�k]!|Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1=�jM3|Prospector <bugzilla@redhat.com>9l]�- automatic rebuildW�ieO|Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casee�hek|Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionE�gY7|Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script{�fQ�)|Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�P�e[�I|Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��dU�=|Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�H�cQ�C|Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeB�b]-|Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceD�aQ=|Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�$�`Q�{|Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preV�_[W|Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��^[�S|Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxW�]U_|Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedn�\K�|Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.O�[]G|Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)e�ZS}|Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedm�Y]�|Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��X]�Y|Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindF�W]5|Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5B�VU5|Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3� �US�K|Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�>�TO�1|Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)V�SU]|Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunB�RU5|Bill Nottingham <notting@redhat.com>7��@- initscript munging`�QUq|Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init fileb�PG�|Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).S�OUW|Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �NG�w|Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.D�MU9|Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultY�LGq|Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�`�KM�w|Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # � �r k/ � � � G � � � � N �P�m ��e��g �l�@ � � J�y!|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1A�m|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1V� oC|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�O� m�5|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)F� ]5|Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4H� QE|Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmentd� ]q|Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)R�]M|Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�t�]�|Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�-�]�|Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)w�]�|Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�C�]�-|Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)`�]i|Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)a�]k|Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)G�Y;|Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf�� ]�Q|Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890?�]'|Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalp�~]�|Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceF�}]5|Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script;�|] |Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3_�{]g|Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�(�z]�w|Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindL�y]A|Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real[�x]_|Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��w]�/|Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements;�v] |Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �u]�a|Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)o�t]�|Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�"�sM�{|Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606f�r]u|Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy)9�q]|Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��p]�I|Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18o�o]�|Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)?�n]'|Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalI�m];|Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � [�. � b � - � h ��x�>�}.��i�a*�s�|@ � F�-m%|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #659759�,E3|Tim Powers <timp@redhat.com>=@- automated rebuild9�+E3|Tim Powers <timp@redhat.com><��- automated rebuild�7�*m�|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.O�)e?|Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releaseb�(m]|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�3�'m�}|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��&[�M|Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagso�%mw|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)B�$EE|Tim Powers <timp@redhat.com><QH�- rebuild against new libssl9�#E3|Tim Powers <timp@redhat.com><<0�- automated rebuildA�"m|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0L�!{#|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10[� yC|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)`� yM|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�$� y�S|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.�� y�'|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)J� y!|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�t�y�s|Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�'�m�e|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�I�m�)|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)u�m�|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)O�e?|Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasey�y|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)d�yU|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6O�y+|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2w�y{|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�E�y�|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesa�yO|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�!�m�Y|Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. % [ � N � � 9 9 � e 3 � � =��C��:��=�:��g�] �N��& � [ Z�RcW|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randomk�Qcy|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentf�Pco|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesa�Oce|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"X�N_W|Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"K�M_=|Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLk�L_}|Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledP�K_G|Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)K�J_=|Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLk�I_}|Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedK�H_=|Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLL�G_?|Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL2�FK |Elliot Lee <sopwith@redhat.com>>��@- rebuiltL�E_?|Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�0�D_�|Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkL�C_?|Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELL�B_?|Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL]�A_a|Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceK�@]?|Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELG�?]7|Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startups�>]� |Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsF�=]5|Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsH�<]9|Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveI�;];|Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kit`�:]i|Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelC�9]/|Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2C�8]/|Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2g�7_u|Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes/�6E |Tim Powers <timp@redhat.com>>.��- rebuilt\�5__|Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate filer�4c�|Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�|�3_� |Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environment`�2_g|Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others.^�1]e|Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsN�0MU|Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64U�/]S|Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�V�.]�S|Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & u �i��[ � m � � Z � t � 0 � k �q ���� �7f�x�b u �i�xs�c|Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��wQ�U|Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �vQ�m|Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data]�uQo|Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionw�tQ�!|Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)q�sQ�|Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�M�rQ�M|Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.`�qQu|Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��pQ�5|Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServersd�oQ}|Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesN�nQQ|Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�%�mQ�}|Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775J�l_;|Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3N�k_C|Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsP�j_G|Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind2�iK |Elliot Lee <sopwith@redhat.com>@��- rebuiltq�h_�|Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneN�g_C|Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageO�f_E|Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconp�e_�|Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root\�d__|Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��c_�1|Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallX�b]Y|Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context2�aK |Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltT�`eI|Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmW�_Gm|Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.A�^]+|Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT2�]K |Elliot Lee <sopwith@redhat.com>@,�@- rebuiltG�\]7|Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsM�[]C|Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageC�Z]/|Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestarta�Y]k|Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilA�X]+|Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3G�We/|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportV�VcO|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryh�Ueq|Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxQ�TcE|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log file@�Sc#|Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again � ��# � � > � 3������]� �+� u�e|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�$� s�Y|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedy�s�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�,�q�k|Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6a�qW|Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.l�qm|Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesf�qa|Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�1�q�u|Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��k�=|Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)x�e�|Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�7� k�|Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�L�k�1|Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�0�~k�y|Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�-�}s�k|Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear}�|s� |Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�)�{{�[|Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�C�z{�|Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootf�y{W|Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3 V � � � ld�Vb�cS�D�� � V � � o�S|Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��m�A|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�l�m�o|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�>�m�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootO�cA|Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�9�m� |Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �m�/|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersx�m�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .� �m�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�p�m�w|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled}�m�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �m�+|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��m� |Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsw�k�|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�_�k�W|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�y� k� |Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).K� s)|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�h� k�i|Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �B�L � } � c v ���]���Y� x�0m�|Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageS�/m?|Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�!�.m�Y|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�|�-m�|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��,m�!|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�'�+m�e|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�r�*m�{|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �)m�)|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesc�(m_|Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�"�'k�]|Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)\�&kS|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�i�%k�k|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanupg�$qc|Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�,�#k�q|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)_�"mW|Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportj�!ok|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders�� k�A|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format[� kQ|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today�� q�|Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !6� S |Jesse Keating <jkeating@redhat.com>C�q�- rebuilt g � l �@�L�f�F�7�M�~ � g � �Dq�%|Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��Cq� |Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�1�Bq�u|Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��Aq�?|Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)g�@qc|Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)}�?s� |Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� �>s�)|Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config|�=s� |Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails^�<sO|Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�;�;s�|Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid contextZ�:sG|Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��9s�|Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��8m�|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}l�7sk|Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�6�6m�|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��5m�9|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-develZ�4yA|Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbusd�3uY|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersJ�2{ |Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�\�1u�G|Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � [ � a � L � 1�<p�h������h � ��Xc�-|Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)n�Wc|Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�B�Vc�%|Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�,�Uc�y|Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�t�Tc� |Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�Q�Sc�C|Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)`�Rcc|Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptf�Qco|Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)p�Pc�|Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��Oc�C|Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�H�Nc�1|Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version~�Mc� |Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullq�Lc�|Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesm�Kc}|Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�'�Jc�o|Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208m�Iqo|Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�!�Hq�U|Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��Gq� |Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�l�F}�_|Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�!�Eq�U|Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches I � � I � v ���R{} �mb�^ � I b�nee|Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�,�ma�{|Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support^�lmU|Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �ka�a|Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�"�j_�i|Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)b�icg|Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsj�h_{|Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�+�gc�w|Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)q�fc�|Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��e_�1|Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)q�dc�|Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�S�c_�K|Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288O�b_E|Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�G�a[�7|Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��`[�5|Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�y�_[�|Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�%�^[�s|Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�N�][�E|Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)U�\cM|Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systemk�[cy|Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�0�Zc�|Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��Yc�C|Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) 8 �� � u � � p � 2��}#�$�g�f�7�8 � ��g�7|Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)i��gq|Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)r��c�|Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�4��c� |Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�-��g�w|Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���g�K|Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressP��g?|Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS[��gU|Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminQ�� gA|Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscripte�cm|Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��~g�M|Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails`�}cc|Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)W�|cQ|Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)u�{c� |Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��zg�9|Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�'�yc�o|Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��xg�=|Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�&�wg�i|Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �vg�1|Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�7�ug� |Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�8�tc�|Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�=�sg�|Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�E�rc�+|Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverj�qeu|Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�1�pa�|Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)\�oeY|Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISC @ ��L � ] � k � � H �N�c�n *�<� � @ �$��!e�g|Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�O�� c�?|Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better{�� g�|Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��� c�?|Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)V�� gK|Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�\�� c�Y|Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch_��g]|Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)C��g%|Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsN��g;|Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupX��cS|Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G|Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�N��c�=|Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�j��c�u|Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���c�-|Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�*��c�u|Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[|Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)i��cu|Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)a��ce|Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)a��ce|Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283���g�-|Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��� g�G|Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)Q�� cE|Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)d�� �1|Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsG�� g-|Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�|�� g�|Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281) i �0�, � - � p g � s r �&b���U�7�v � i ~��>k�|Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�#��=g�c|Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig_��<i[|Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)f��;em|Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itS��:eG|Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���9i�M|Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources|��8e�|Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�9��7e�|Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���6i� |Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)d��5ie|Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchj��4iq|Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develn��3e}|Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�?��2e� |Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patchs��1e�|Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)e��0ek|Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)h��/eq|Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�|��.e�|Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)n��-e}|Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)~��,i�|Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��+e�W|Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want itd��*am|Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)`��)]i|Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4U��(aO|Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans scriptZ��'aY|Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��&a�[|Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)y��%]�|Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���$e�#|Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filee��#ek|Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)c��"ic|Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477) � �"�s � 2 � / � 9 � � ZR5Ph�A� �S � �$��Ya�k|Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchQ��XgA|Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new opensslr��We�|Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���Va�%|Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���U� �|Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild]��T[e|Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�A��S[�+|Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�"��R[�m|Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�o��Q[�|Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsI��Pg1|Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�`��Oi�[|Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Ni�K|Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Me�%|Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Lg�G|Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�N��Kc�=|Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is setn��Jc|Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Ia�7|Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confc��Hak|Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packagea��Gag|Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���F�!�|Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Ee�7|Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hW��DsA|Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesQ��CaG|Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslV��BaQ|Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)Q��A[M|Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasei��@gq|Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedm��?ku|Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends f � E � � v ) � � [V �:��,��kL�h H��va5|Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1f��u[w|Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerv��tg� |Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���se�S|Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch\��rc[|Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesI��qc5|Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2t��pa� |Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���oa�Q|Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)k��na{|Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBH��ma5|Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1O��l_E|Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind~��k_�!|Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)X��j[[|Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�m��i[�|Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledH��h[;|Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final� ��gi�|Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageL��fi5|Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2`��ei]|Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���di�'|Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��ci�/|Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationI��be3|Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3V��aeM|Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerI��`e3|Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2� ��_e�_|Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys��^e� |Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededq��]e�|Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)I��\e3|Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�Z��[e�S|Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���Ze�I|Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch " X �< � ; � � Z { j � h �3�s�{ g�:�v�0�x � X o��a�|Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedL��a=|Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchY��aW|Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soX��aU|Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)X��aU|Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)k��Y�|Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)a��[m|Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedn��g{|Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)a��ga|Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library[��gU|Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgK��g5|Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Y�� [�[|Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �� �+�|Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildm�� gy|Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedN�� e=|Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�!�� e�a|Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedo��e|Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedI��e3|Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1~��c� |Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)c��ak|Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingH��a5|Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�'|Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptu��a� |Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[|Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)l�� a}|Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�Z��a�W|Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesH��~a5|Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2B��}[/|Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2K��|g5|Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���{e�%|Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellu��ze� |Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchf��yaq|Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationX��xaU|Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�y��wa�|Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkg F z'x � a � 5 � f�f���K�7�J�f�M F �6��5g� |Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inH��4a5|Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2���3�%�|Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildu��2s}|Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.X��1aU|Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���0[�/|Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedy��/[�|Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)l��.[�|Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���-[�M|Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)y��,[�|Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)V��+[W|Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��*[�A|Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chrootZ��)gS|Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���(g�'|Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballu��'g�|Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)K��&g5|Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1[��%eW|Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��$e�W|Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch[��#eW|Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-devell��"ey|Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedc��![q|Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesg�� [y|Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)V�� [W|Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�&�� [�u|Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�>�� g�|Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�$�� g�e|Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�*��g�q|Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchO��aC|Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�%|Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741) Q �? � Q � , � � 4 � f�P�x������� � Q y��Rg�|Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Y��Qg�O|Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyO��Pg=|Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog� ��Og�7|Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01`��Nae|Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Ma�]|Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20c��Lm_|Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Km�9|Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�N��Jm�3|Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Im�/|Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)x��Hg� |Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)X��GgO|Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�2��Fg�|Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)t��Ei�|Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)[��DcY|Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Ci�!|Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)u��Ba� |Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirQ��AaG|Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�3��@g�|Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�g��?a�q|Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageP��>g?|Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���=[�3|Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confN��<[G|Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelE��;[5|Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���:[�W|Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchN��9c?|Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�N��8g�9|Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings� ��7g� |Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)e��6gi|Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718) �~ � K m � F � q �Q� ��9��4� �A��kg� |Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)f��jgk|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�)��ig�o|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���hg�!|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)L��gk3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349U��fgI|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)� ��eg�7|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)x��dg� |Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Y��cg�O|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)O��be?|Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24e��agi|Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013H��`c3|Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591g��_cq|Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)O��^e?|Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27~��]a� |Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�6��\a�|Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�`��[a�c|Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Za�'|Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Y��Ya�U|Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)T��XaM|Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683q��Wa�|Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)b��Vai|Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Ua�?|Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version}��Tg�|Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackj��Sgs|Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.conf p � � ~ � u ' � U � T�:��I�I�\�>�,�G � p o�� ou|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)`��oW|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143l��oo|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)q��oy|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�#|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o�|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)v��o�|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� |Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)`�� oW|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)Z��oK|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��~o�O|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�-��}o�o|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�l��|o�m|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)J��{g3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864J��zg3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�G��yg�+|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)W��xgM|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�!��wg�_|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�m��vg�w|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)\��ugW|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286J��tg3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704J��sg3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000J��rg3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722i��qgq|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)J��pg3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477J��og3|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620g��ngm|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���mg�%|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�m��lg�w|Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336) ! L ��/ � ` � > � v � � Y�i��T�:S�T�T�w��. � L l��*wg|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixn��)so|Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)f��(w[|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465Q��'u3|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���&u�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)s��%uw|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)b��$uU|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)}��#u� |Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659){��"u�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)e��!u[|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��� u�1|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�b�� u�S|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesb�� o[|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�/�� o�s|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againN�� o3|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740R��o;|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsi��oi|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)|��o� |Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)l��oo|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)��o�|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)i��oi|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� |Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falser��uu|Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrN��o3|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145b��o[|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�7��o�|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm_��oU|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersh��og|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)e�� oa|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)t�� o|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637)z�� o� |Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)n�� os|Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013) y � �& w � s � x � J � [��|�s���0� � y � ��G�|Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)� ��Fq�|Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� ��E}�!|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o��D}g|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���C}�9|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>��B}�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���A{�7|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l��@{c|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p��?{k|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� ��>{�#|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���={�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���<{�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)c��;wU|Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)s��:wu|Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�y��9{�{|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)f��8{W|Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��7{�!|Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)Z��6wC|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�+��5w�c|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617)z��4w�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)q��3wq|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���2w�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)w��1w}|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���0}�|Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�*��/s�e|Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilityr��.ws|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)m��-wi|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)|��,w�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)o��+wm|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572) � �g � � � $ � � � m1�+� \�K�3�i � � l��`{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p��_{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�7��^�'�I~Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��]s�#~Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���\s�~Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� ��[}�!~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o��Z}g~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���Y}�9~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>��X}�~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���W{�7~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l��V{c~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p��U{k~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� ��T{�#~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�7��S�'�I}Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��Rs�#}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Qs�}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� ��P}�!}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o��O}g}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���N}�9}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>��M}�}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���L{�7}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)l��K{c}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)p��J{k}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� ��I{�#}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���H� �i|Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 n d� � � x � � ! � ;��;�4� �S�E� � n p��y}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���x}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��w}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���v{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��u{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��t�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ss� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��rs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���qs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���p}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��o}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���n}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��m}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���l{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��k{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��j{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakey��i�[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�G��hs� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��gs�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���fs�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)� ��e}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)o��d}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���c}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�>��b}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���a{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) c m�W � d � V ���e�� � � y � c � ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��~�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��}s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��|s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���{s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���z}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � �5 J " ^ � K�1�U����%� � ���$s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���#}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��"}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���!}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#�� � �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � q$ � ~ � � � @�9�#�X0mE� � ���8}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��7}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��6��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��5� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��4�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��3�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��2�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��1s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��0s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���/s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���.}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��-}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���,}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�/��+��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��*� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��)�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��(�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��'�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��&s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��%s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) C y� � � 4 X�1��;���� � C �.��L��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��K��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��J� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��I�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��H�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��G�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Fs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Es�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ds� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���C}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��B}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.��A��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��@��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��?� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��>�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��=�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��<�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��;s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��:s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���9s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) � m�W � d � y�[�A�e��� � �#��_� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��^�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��]�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��\�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��[s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Zs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ys� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���X}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�2��W�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��V��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��U��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��T� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��S�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��R�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��Q�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ps� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Os�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ns� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���M}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � L� � [ � � �:���"�F� � �#��r�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��q�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ps� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��os�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ns� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�"��m�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��l�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��k��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��j��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��i� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��h�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��g�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��f�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��es� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ds�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���cs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��b�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��a��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��`��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11 j = a � � � ! ~ ?�\��,��*�$>����5��. j �?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC�� U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga�� Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec�� G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T�� UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �� G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g�� S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��~G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��}Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���|G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��{G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��zO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��y]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��x�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��w�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��v��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��u��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��t� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��s�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 " � m&�< � ` � = � G � ��2\��(��I �{p2� � � <��1] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��0]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��/]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��.M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��-]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��,] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���+]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��*]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��)]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��(]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��'] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��&]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��%M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��$eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��#ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��"Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��!Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q�� [�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��� U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I�� Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC�� ]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE�� Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request. " Q v� � s ( � o � � " � � x��t �s�C����Z� � Q v��Sm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��Re? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��Qy �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��PyU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��Oy+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��Ny{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��My� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��LyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Km�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Jy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��Im �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��HoC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��Gm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��F]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��EQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��D]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��C]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��B]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��A]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��@]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��?]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��>]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��=]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��<Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���;]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��:]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��9]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��8]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��7] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��6]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��5]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��4]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��3]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���2]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements E � � ' } � g ! � � (�W����c�b�G E �}��n_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��m_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��l]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��kMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��j]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��i]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��hm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��gE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��fE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��em� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��de? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��cm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��bm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���a[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��`mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��_EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��^E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��]m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��\{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��[yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��ZyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Yy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���Xy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��Wy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��Vy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��Um�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��Tm�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) - q �(��@ � � E � � 5 � � 7 � � � � W �F��1�� �C��I��5��A��l& � q U��eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[�� cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml�� cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg�� co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb�� ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y�� _W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��~_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��}_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��|_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��{]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��z]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��y]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��x]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��w]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��v]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��u]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��t]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��s]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��r_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��qE �Tim Powers <timp@redhat.com>>.��- rebuilt]��p__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��oc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � �l� � c � � a � � X � l�#�E"��1h�7 � �.��8s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��7s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��6{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��5{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��4{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��3s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���2Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��1Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��0Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��/Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��.Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��-Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��,Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���+Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��*Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��)QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��(Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��'_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��&_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��%_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��$K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��#_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��"_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��!_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]�� __ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��� _�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY�� ]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3�� K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt � J � ; � � � � ��}S��de � �`��Ik�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��Hk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��Gs) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��Fk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��Eu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��Ds�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��Cs� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Bq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��AqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��@qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��?qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��>q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���=k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��<e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��;k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��:k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��9k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � z � h r � o ]�J���T�2�)�� h��_qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��^k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��]mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��\ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���[k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��ZkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Yq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��XS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��Wo�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���Vm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��Um�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��Tm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��ScA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��Rm� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��Qm�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��Pm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���Om� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��Nm�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��Mm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Lm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Km� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Jk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) j � � � ��a_8�c�2 � j [��oyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��nuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��m{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��lu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��km� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��jm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��im�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��hm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���gm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��fm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��em�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��dm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��cm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��bk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��akS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��`k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � - � 5 � K � ' � �&�S�8� � ���q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"�� q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���~q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��}q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���|q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��{qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��zs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��ys�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��xs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��wsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��vs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��usG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���ts� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���sm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��rsk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��qm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���pm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � Y�: � R � j � � % NT"Z�[D�Dp � �&��[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a�� cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg�� co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q�� c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��� c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I�� c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. ` � u ( � � � � �R�|�/��R�,a ` �9��/c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��.g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��-c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��,eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��+a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��*eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��)ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��(a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��'mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��&a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��%_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��$cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��#_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��"c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��!c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��� _�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r�� c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T�� _�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P�� _E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H�� [�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist M C� q � 0 � Z � W � � 7�E��a�`^�S�*�^ � M � ��Mc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Lcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Kce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Jce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��Ig�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���Hg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��GcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��F�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��Eg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��Dg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���Cg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��Bgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Ac� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��@c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��?g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���>g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��=g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��<gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��;gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��:cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���9g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��8cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��7cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��6c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���5g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��4c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���3g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��2g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��1g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��0g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) � P� T g � o )�9��:�h�b�a�9 � � ��fe�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��eam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��d]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��caO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��baY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��aa�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��`]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���_e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��^ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��]ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��\e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��[c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��Zg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Yc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��XgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��Wc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��Vg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��Ug% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��Tg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��ScS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���Rc�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��Qc�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��Pc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���Oc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��Nc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 � } � 1 � � � � !�a�j��r�}�^�{ � d��ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)����!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �� e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��~aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��}aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��|[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��{gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��zku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��yk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��xg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��wi[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��vem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��ueG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���ti�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��se� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��re� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���qi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��pie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��oiq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��ne} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��me� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��le� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��kek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��jeq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��ie� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��he} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��gi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118) > p�) � � g � 3 >��m�H�{�6��� � � > W�� eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#�� [�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p�� [� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ�� g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a�� i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��� i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-conf � �"�1 � � � � = � f � �E��I���5�P�w0� � m��;a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��:a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��9a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��8[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��7g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���6e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��5e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��4aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��3aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��2a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��1a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��0[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��/g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���.e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��-c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��,c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��+a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���*a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��)a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��(a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��'_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��&_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��%[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��$[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��#[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���"i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��!i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a�� i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��� i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �� i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3 � ^�Z � " � ` � f � P q !�[���X��5�Z� < � �'��Y[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��Xg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��Wg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��Vg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��UaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���Ta�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��Sa� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��Ra= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��QaW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��PaU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��OaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��NY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��M[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Lg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Kga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��JgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��Ig5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��H[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��G�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��Fgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��Ee= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��De�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��Ce �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Be3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Ac� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��@ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��?a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���>e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��=a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��<a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg) � �9�` ^ � � 4 � J 8 � _�V�O�x���d� ��} � � Q��yg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���x[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��w[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��v[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���u[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��tc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��sg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���rg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��qgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��pg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��oa5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��n�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��ms} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��laU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���k[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��j[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��i[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���h[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��g[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��f[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��e[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��dgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���cg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��bg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��ag5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��`eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��_e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��^eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��]ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��\[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��[[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��Z[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256) C Z � � ( p � 0����e�t�y� � C ���a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z�� g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP�� g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog��� g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a�� ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u�� i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���~i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��}a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��|aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��{g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��za�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpage � ^ � � � d 1 ��G��?� �$���z+ � ]��0gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��/g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��.g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��-g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��,gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��+g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��*g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��)gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���(g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��'g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��&g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��%gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��$g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���#g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��"k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��!gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)��� g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y�� g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z�� g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P�� e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f�� gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��Mo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Lo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Ko� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��JoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��Iog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��Hoa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��Go �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��Fo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��Eos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��Dou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��CoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Boo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Aoy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���@o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���?o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��>o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��=o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���<o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��;oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��:oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��9o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��8o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��7o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��6g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��5g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��4g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��3gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��2g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��1g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��lw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���k}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��js�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��iws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��hwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��gw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��fwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��ewg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��dso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��cw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��bu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���au� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��`uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��_uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��^u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��]u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��\u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���[u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��Zu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��Yo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��Xo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��Wo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��Vo; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��Uoi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��To� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��Soo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��Ro�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��Qo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��Poi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���Oo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��Nuu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr L y� � t � w x � ��~ p� ���A�_�| � L g�� S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W�� Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���~}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���|{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��z{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���y{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���x{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���w{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��vwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��uwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��t{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��s{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��r{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��qwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��pw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��ow� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��nwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���mw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) � �g�s � � k � p � ] >�dz�J�{��[��p � �Q��*[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���)U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��(Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��']- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��&Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��%Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��$[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���#[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��"U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��!K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P�� ]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f�� S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��� ]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde�� S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V�� Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;�� S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2 $ w �6�p. � � c � � k � O � l��1� �� �@��)`�17 � w e��N]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��M]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��L]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��K]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��J]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��I]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��H]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��G]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��FY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���E]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��D]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��C]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��B]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��A] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��@]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��?]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��>]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��=]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���<]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��;] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��:]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��9]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��8M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��7]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��6] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���5]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��4]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��3]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��2]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��1] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��0]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��/M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��.eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��-ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��,Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��+Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to "" � �h�8 � � � � � O � � � F�JPm�^��g)�n� � �4��lm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���k[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��jmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��iEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��hE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��gm �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��f{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��eyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��dyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��cy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���by�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��ay! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��`y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��_m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��^m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��]m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��\e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��[y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��ZyU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��Yy+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��Xy{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��Wy� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��VyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Um�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Ty! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��Sm �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��RoC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��Qm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��P]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��OQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environment $ � �E�J � e � U ��w�v.��3��#��%���|E��4 � � Q��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL�� _= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3�� K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ�� ]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��~]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��}]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��|_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��{E �Tim Powers <timp@redhat.com>>.��- rebuilt]��z__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��yc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��x_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��w_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��v]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��uMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��t]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��s]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��rm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��qE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��pE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��om� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��ne? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��mm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code ) w �@�} � C � � ; � � N � � N � � )��<�O��3��1����(�<i � w x��9Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��8Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��7Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��6Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���5Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��4Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��3QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��2Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��1_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��0_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��/_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��.K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��-_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��,_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��+_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��*_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��)__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���(_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��']Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��&K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��%eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��$Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��#]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��"K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��!]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN�� ]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb�� ]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB�� ]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H�� e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulled Z �{ � � � � ��'����a�� � Z z��Ms� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Lq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��KqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��Jqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��Iqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��Hq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���Gk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��Fe� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��Ek� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��Dk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��Ck�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��Bs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��As� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��@{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��?{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��>{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��=s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���<Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��;Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��:Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix version � �% 7 � � �}�ku�r`�M � �?��^m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��]cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��\m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��[m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��Zm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���Ym� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��Xm�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��Wm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Vm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Um� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Tk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��Sk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��Rk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��Qs) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��Pk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��Ou�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��Ns�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determined Y s � � � � ? � !2��A�� �� Y �"��sm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��rm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���qm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��pm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��om�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��nm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��mm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��lk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��jk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��iqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��hk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��gmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��fok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���ek�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��dkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���cq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��bS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��ao�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���`m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��_m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket � �+ I � � 2 _�g�}�Y�F�X� � �2��q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<�� s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���~s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���}m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��|sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��{m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���zm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��yyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��xuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��w{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��vu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��um� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��tm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps � t� > � @ � 'z�A�5�e��b � �C��c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"�� q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.��� q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m�� }�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"�� q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �� q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root 7 � � � D � k���?f�d��N�? � 7 _��1mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��0a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��/_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��.cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��-_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��,c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��+c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���*_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��)c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��(_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��'_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��&[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���%[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��$[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��#[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��"[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��!cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml�� cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1�� c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��� c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��� c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o�� c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter � N�� � ` � R � � G�X�J����+�v�&l � � j��Lgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Kc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��Jc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��Ig�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���Hg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��Gg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��FgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��EgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��Dcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���Cg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��Bcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��AcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��@c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���?g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��>c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���=g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��<g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��;g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��:g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��9c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��8g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��7c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��6eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��5a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��4eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��3ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��2a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support > mk � ` � 7 � k � Z � �Z�d�e�(� > �P��ec�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��dg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���cc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��bgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��ac�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��`g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��_g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��^g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��]cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���\c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��[c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��Zc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���Yc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��Xc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��Wc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Vcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Uce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Tce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��Sg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���Rg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��QcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��P�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��Og- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��Ng� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���Mg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g�� em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���~i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��}e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��|e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���{i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��zie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��yiq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��xe} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��we� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��ve� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��uek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��teq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��se� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��re} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��qi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��pe�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��oam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��n]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��maO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��laY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��ka�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��j]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���ie�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��hek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��gic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��fe�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd�� ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb�� ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��� �!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �� e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX�� sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���8e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��7c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��6c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��5a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���4a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��3a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��2a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��1_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��0_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��/[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��.[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��-[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���,i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��+i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��*i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���)i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��(i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��'e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��&eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��%e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��$e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��#e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��"e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��!e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[�� e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��� e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%�� a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR�� gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls�� e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��YaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��XY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��W[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Vg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Uga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��TgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��Sg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��R[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��Q�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��Pgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��Oe= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��Ne�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��Me �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Le3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Kc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��Jak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��Ia5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���He�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��Ga� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��Fa�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��Ea} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��Da�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��Ca5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��B[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��Ag5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���@e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��?e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��>aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��=aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��<a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��;a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��:[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��9g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��ws} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��vaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���u[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��t[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��s[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���r[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��q[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��p[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��o[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��ngS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���mg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��lg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��kg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��jeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��ie�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��heW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��gey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��f[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��e[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��d[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��c[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��bg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��ag�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��`g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��_aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���^a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��]a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��\a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��[aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��ZaU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y�� g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y�� gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3�� g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u�� i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\�� cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF�� [5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��~c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��}g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���|g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��{gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��zg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��ya5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��x�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���-g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��,k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��+gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���*g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��)g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��(g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��'e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��&gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��%c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��$cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��#e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��"a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��!a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a�� a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��� a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z�� a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U�� aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���Io� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��Ho� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��Go�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���Fo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��EoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��DoK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��Co�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��Bo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��Ao�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��@g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��?g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��>g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��=gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��<g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��;g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��:gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��9g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��8g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��7g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��6gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��5g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��4g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��3gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���2g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��1g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��0g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��/gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��.g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��iuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��hu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��gu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��fu[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���eu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��du�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��co[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��bo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��ao3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��`o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��_oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��^o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��]oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��\o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��[o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��Zoi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���Yo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��Xuu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��Wo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Vo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Uo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��ToU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��Sog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��Roa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��Qo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��Po� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��Oos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��Nou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��MoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Loo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Koy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���Jo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��~{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��}{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��|{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��{wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��zw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��yw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��xwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���ww� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��vw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���u}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��ts�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��sws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��rwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��qw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��pwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��owg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��nso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��mw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��lu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���ku� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��juw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) f a�Z � D < � 4 � & b�O�5�i���"�| � f � ��!s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8���'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��� � �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� �� � �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)��� q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) A �5 � ' c � P � 6 �Z���Q�J�4�i A �#��7�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��6�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��5s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��4s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���3s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���2}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��1}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���0}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��/}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��.�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��-�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��,s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��+s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���*s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���)}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��(}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���'}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��&}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���%{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��${c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��#�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��"s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � = v o � Y �f�{�S�9�]� � �#��K�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��J�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Is� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Hs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Gs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���F}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��E}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��D��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��C� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��B�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��A�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��@�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��?s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��>s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���=s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���<}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��;}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���:}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��9� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��8�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 ( = a � � � :O's� ���( z��^�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��]s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��\s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���[s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��Z�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��Y��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��X��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��W� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��V�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��U�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��T�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ss� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Rs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Qs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���P}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��O��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��N��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��M� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��L�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 a � � 9 � � ��V�4�o�kw��o�t � a C��zU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��yUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��xG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��wUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��vG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��uU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��tGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��sM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��rU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���qS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��pS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��oOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��nS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��mS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��lGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��kG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��jGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���iG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��hG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��gO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��f]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��e�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��d�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��c��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��b��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��a� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��`�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��_�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file " � ��N � � A � z � (��n�=�s �k*��\�Q� � p�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q�� [�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��� U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I�� Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC�� ]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE�� Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��� ]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��~U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���}S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��|O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��{U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postun ! � ] �3 � 4 � � E � � � � ? � ����(���`�$��w# � e��=yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��<y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��;y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��:y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��9yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��8m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��7y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��6m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��5oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��4m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��3]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��2QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��1]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��0]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��/]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��.]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��-]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��,]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��+]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��*]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��)Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���(]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��']' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��&]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��%]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��$] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��#]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��"]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��!]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\�� ]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set��� ]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� �� ]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665) ` �.� e � � o � 1 � l ��P�D �P�U�p � ` _��Y]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��XMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��W]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��V]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��Um% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��TE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��SE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��Rm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��Qe? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��Pm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��Om�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���N[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��Mmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��LEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��KE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��Jm �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��I{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��HyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��GyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Fy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���Ey�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��Dy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��Cy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��Bm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��Am�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��@m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��?e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��>y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586) * � ��" � � ! � � , � � F � � 2 � .x'��O��:�z �L�}8�u��" � � N��]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB�� ]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��~cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��}eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��|cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��{c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��zcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��ycy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��xco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��wce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��v_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��u_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��t_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��s_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��r_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��q_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��p_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��o_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��nK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��m_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��l_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��k_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��j_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��i_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��h]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��g]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��f]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��e]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��d]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��c]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��b]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��a]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��`]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��__u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��^E �Tim Powers <timp@redhat.com>>.��- rebuilt]��]__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��\c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��[_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��Z_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others. ! � �}7��K � b � 8 � o 8 � � A � C�S��)�� ��; � ~��$s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��#{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��"{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��!{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j�� s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .��� Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� �� Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^�� Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx�� Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]�� __ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��� _�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY�� ]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3�� K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libs � M � E � �<�`�H���� � �z��5k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��4s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��3k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��2u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��1s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��0s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��/q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��.qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��-qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��,qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��+q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���*k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��)e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��(k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��'k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��&k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��%s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear � � � � � �x�e��o4�M�D � `��JmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��Iok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���Hk�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��GkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Fq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��ES �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��Do�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���Cm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��Bm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��Am� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��@cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��?m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��>m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��=m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���<m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��;m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��:m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��9m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���8m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��7k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��6k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed). c N� � � j s {�CA�E c �]��Yu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��Xm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��Wm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��Vm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��Um� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���Tm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��Sm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��Rm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��Qm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��Pm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��Ok�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��NkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��Mk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��Lqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��Kk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816) z �H� � � � 4 s ��{s<�!z �"��mq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��lq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���kq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��jq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���iq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��hqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��gs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��fs�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��es� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��dsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��cs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��bsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���as� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���`m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��_sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��^m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���]m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��\yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��[uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��Z{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild F � [ � < � T � l��'PV$\�]F � F V��cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��� c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��~c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��}c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��|c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��{c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��zcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��yco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��xc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���wc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��vc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��uc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��tc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��sc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��rc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��pq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���oq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��n}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075) � ,� � � U | z�d�U�M�4� � � �F��c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)��� _�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r�� c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T�� _�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P�� _E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H�� [�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802) � � � B � p � / � Y�V��6�D��`�_]�R � ���5g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��4cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��3�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��2g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��1g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���0g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��/gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��.c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��-c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��,g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���+g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��*g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��)gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��(gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��'cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���&g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��%cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��$cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��#c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���"g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��!c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch��� g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'�� g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� �� g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853) U r �8 � � Y ����L��c�Ny�g�u � U � ��Na�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��M]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���Le�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��Kek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��Jic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��Ie�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��Hc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��Gg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Fc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��EgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��Dc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��Cg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��Bg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��Ag; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��@cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���?c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��>c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��=c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���<c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��;c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��:c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��9cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��8ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��7ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��6g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431) � �G�y � T � � r � � X����8�A�rI�T��5 � � X��lsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��kaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��jaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��i[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��hgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��gku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��fk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��eg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��di[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��cem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��beG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���ai�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��`e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��_e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���^i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��]ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��\iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��[e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��Ze� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��Ye� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��Xek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��Weq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��Ve� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��Ue} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��Ti� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��Se�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��Ram �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��Q]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��PaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��OaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995) � n�i q � * � � h�4?��n�I�|�7 � � J��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR�� gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���~a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���}� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��|[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��{[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��z[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��y[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��xg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��wi�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���vi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���ue�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���tg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��sc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��rc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��qa�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��pak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��oag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���n�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��me�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.h } �_ � h � L � � � C P�p �_�I��z��GH�� } ���#e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��"e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��!aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY�� aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z�� a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g�� [w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw�� g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a�� i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��� i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �� i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W�� eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682) u �i < � ) � % � p � � + � 1�<��&�M��#�t y%u �+��Cg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��BaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���Aa�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��@a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��?a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��>aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��=aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��<aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��;Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��:[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��9g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��8ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��7gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��6g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��5[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��4�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��3gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��2e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��1e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��0e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��/e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��.c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��-ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��,a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���+e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��*a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��)a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��(a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��'a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��&a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��%[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��$g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1 � V � � � � F � D � � �0 �E�<�5�^�p�J � ���_g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��^gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��]g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��\a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��[�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��Zs} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��YaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���X[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��W[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��V[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���U[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��T[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��S[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��R[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��QgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���Pg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��Og� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��Ng5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��MeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��Le�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��KeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��Jey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��I[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��H[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��G[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��F[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��Eg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��Dg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049) � ,�< � � � � � I � `�/�U���p�h���$ � k��{gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��zg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��yg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��xg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���wg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��vae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��ua�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��tm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���sm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��rm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��qm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��pg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��ogO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��ng� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��mi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��lcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���ki�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��ja� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��iaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��hg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��ga�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��fg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���e[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��d[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��c[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���b[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��ac? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��`g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings g ~�� � � M g � ( � h �]~��C;�!Z g �n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)��� g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y�� g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z�� g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P�� e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f�� gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U�� aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��~ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���}a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��|g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack S v �l � � ` � = � : m ��*�(�9��� �E � S {��3o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��2os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��1ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��0oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��/oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��.oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���-o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���,o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��+o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��*o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���)o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��(oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��'oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��&o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��%o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��$o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��#g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��"g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��!g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X�� gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"�� g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n�� g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]�� gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475) � � �L � ( � ^ � e � < � J��2}.�-�+�L�k � � p��Swm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��Rwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��Qso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��Pw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��Ou3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���Nu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��Muw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��LuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��Ku� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��Ju� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��Iu[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���Hu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��Gu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��Fo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��Eo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��Do3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��Co; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��Boi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��Ao� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��@oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��?o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��>o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��=oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���<o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��;uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��:o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��9o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��8o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��7oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��6og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��5oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��4o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637) � � � \ � Y � d � T � WX�x�f�^�P��y�` � � ��o� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���nq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���m}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��l}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���k}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��j}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���i{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��h{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��g{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���f{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���e{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���d{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��cwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��bwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��a{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��`{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��_{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��^wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��]w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��\w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��[wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���Zw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��Yw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���X}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��Ws�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��Vws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��Uwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��Tw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477) " � Q�o � � " � \ � Z � T n �$�e �^��u�d��3�< � W��[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P�� ]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f�� S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��� ]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �� G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��~Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��}M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��|U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���{S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��zS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��yOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��xS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��wS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��vGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��uG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��tGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���sG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��rG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��qO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��p]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h> # � ��F x � � K � � C � x 4�)���d����F�4��4�U � b��4]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��3Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���2]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��1]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��0]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��/]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��.] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��-]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��,]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��+]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��*]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���)]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��(] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��']�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��&]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��%M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��$]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��#] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���"]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��!]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@�� ]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ�� ]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8�� ] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=�� ]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>�� M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %pre G ��V � � R � � Q | ! � ���8�{��/�39�V � G a��QyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Py�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���Oy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��Ny! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��My�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��Lm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��Km�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��Jm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��Ie? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��Hy �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��GyU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��Fy+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��Ey{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��Dy� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��CyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Bm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Ay! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��@m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��?oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��>m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��=]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��<QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��;]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��:]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��9]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��8]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��7]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��6]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��5]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489) " d �O �� x ? � � � � K �J��/-�U!�m%�r%�b � d ^��s_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��r]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��q]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��p]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��o]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��n]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��m]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��l]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��k]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��j]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��i_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��hE �Tim Powers <timp@redhat.com>>.��- rebuilt]��g__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��fc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��e_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��d_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��c]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��bMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��a]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��`]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��_m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��^E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��]E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��\m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��[e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��Zm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��Ym�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���X[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��Wmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��VEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��UE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��Tm �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��S{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��RyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574) + � �^�W � � j � � M � | � h �J��R �l5��:��D��'��H � K�� _; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O�� _C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ�� _G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN�� ]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb�� ]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB�� ]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H�� e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y�� _W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��~_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��}_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��|_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��{_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��z_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��y_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��xK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��w_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��v_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��u_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��t_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL k U� � � d � � c ��r��x�� � k ���4k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��3e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��2k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��1k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��0k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��/s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��.s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��-{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��,{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��+{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��*s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���)Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��(Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��'Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��&Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��%Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��$Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��#Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���"Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��!Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO�� QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&�� Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775 L I � m U � � ����^T�B L �q��Em�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��Dm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Cm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Bm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Ak� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��@k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��?k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��>s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��=k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��<u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��;s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��:s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��9q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��8qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��7qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��6qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��5q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � z� � , � " � � � �&�S�5F��U� � �s��\m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��[m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��Zm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��Yk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��XkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��Wk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��Vqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��Uk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��TmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��Sok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���Rk�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��QkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Pq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��OS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��No�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���Mm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��Lm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��Km� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��JcA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��Im� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��Hm�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��Gm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���Fm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. [ S � � � G ���0����{ [ �<��ms� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��lsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���ks� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���jm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��isk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��hm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���gm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��fyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��euY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��d{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��cu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��bm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��am? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��`m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��_m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���^m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��]m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition � � � � � = �� b�C�[� s � � g��co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I�� c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��~c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��}c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��|c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��{qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��zq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���yq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��x}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��wq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��vq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���uq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��tq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���sq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��rqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��qs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��ps�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��os� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��nsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage 4 �� � � � ] � ����;��c6 � 4 ���_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml�� cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1�� c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��� c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��� c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o�� c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin script T �Y � � � 6 � ! � Y � 3h%g�n�+� �\ � T f��1cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���0g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��/cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��.cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��-c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���,g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��+c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���*g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��)g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��(g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��'g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��&c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��%g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��$c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��#eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��"a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��!eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc�� ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-�� a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_�� mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� �� a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#�� _�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878) j �J�X � � t s q % � f�=�q`�$�` � j Y��JcS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���Ic�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��Hc�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��Gc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���Fc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��Ec�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��Dc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Ccu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Bce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Ace �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��@g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���?g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��>cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��=�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��<g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��;g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���:g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��9gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��8c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��7c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��6g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���5g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��4g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��3gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��2gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscript � �e � / � � 0 � ^ � X�W��/� ��(�F��6 � ���hi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��gie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��fiq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��ee} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��de� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��ce� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��bek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��aeq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��`e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��_e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��^i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��]e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��\am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��[]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��ZaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��YaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��Xa�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��W]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���Ve�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��Uek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��Tic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��Se�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��Rc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��Qg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Pc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��OgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��Nc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��Mg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��Lg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��Kg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanup � �@ � I � z Q � \ � � =���Z������ � J��g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��� i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���~g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��}c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��|c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��{a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��zak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��yag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���x�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��we�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��vsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��uaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��taQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��s[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��rgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��qku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��pk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��og�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��ni[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��mem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��leG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���ki�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��je� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��ie� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet q c � : � � H � �U�Z�f �-�<����H � q P�� _E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind�� _�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y�� [[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[�� e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed��� e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%�� a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR�� gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls�� e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms | �C�- � ~ ^ � x + , � d�a�}�,��9�N ��� | � ��>�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��=gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��<e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��;e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��:e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��9e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��8c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��7ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��6a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���5e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��4a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��3a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��2a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��1a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��0a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��/[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��.g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���-e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��,e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��+aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��*aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��)a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��(a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��'[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��&g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���%e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��$c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��#c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��"a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���!a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l�� a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1 x !�q � 2 � e � Y � ^ Z��@�y�@�>�t�� x � ��\[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��[gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���Zg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��Yg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��Xg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��WeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��Ve�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��UeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��Tey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��S[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��R[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��Q[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��P[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��Og� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��Ng�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��Mg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��LaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���Ka�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��Ja� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��Ia= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��HaW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��GaU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��FaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��EY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��D[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Cg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Bga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��AgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��@g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��?[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings i �'� � � @ � R � , ����E�ex�i�f��x � i � ��{m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��zg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��ygO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��xg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��wi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��vcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���ui�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��ta� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��saG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��rg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��qa�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��pg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���o[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��n[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��m[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���l[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��kc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��jg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���ig� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��hgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��gg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��fa5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��e�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��ds} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��caU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���b[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��a[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��`[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���_[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��^[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��][W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch p , � � � � a � p�u���?Y��Z �O p �Z��g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a�� a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)��� a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z�� a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U�� aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a�� ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��~m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���}m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��|m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) p �p � � � � � _��U��I��&#V�� p � ��0o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��/o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��.o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��-g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��,g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��+g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��*gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��)g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��(g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��'gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��&g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��%g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��$g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��#gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��"g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��!g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h�� gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)��� g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n�� g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B�� g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g�� gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �<� � ~ � 2 � K � S�|[��*�1���Q�I � c��Po[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��Oo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��No3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��Mo; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��Loi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��Ko� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��Joo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��Io�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��Ho� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��Goi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���Fo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��Euu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��Do3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Co[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Bo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��AoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��@og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��?oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��>o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��=o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��<os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��;ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��:oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��9oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��8oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���7o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���6o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��5o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��4o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���3o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��2oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��1oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot � � � � 6 � U � w � �(x�r�u�E�T��r � ���n{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��mwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��lwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��k{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��j{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��i{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��hwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��gw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��fw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��ewq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���dw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��cw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���b}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��as�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��`ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��_wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��^w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��]wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��\wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��[so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��Zw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��Yu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���Xu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��Wuw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��VuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��Uu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��Tu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��Su[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���Ru�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��Qu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packages � w�o � a � � � � q � 2�P�m�=��;�5O���F � � C��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga�� Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec�� G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T�� UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� �� G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E�� U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W�� Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��~Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���}G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��|G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��{O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��z]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��y� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���xq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���w}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��v}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���u}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��t}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���s{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��r{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��q{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���p{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���o{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) " � ��N � � A � z � (��n�=�s �k*��\�Q� � p��0]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��/M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��.]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��-] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���,]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��+]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��*]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��)]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��(] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��']! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��&M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��%eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��$ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��#Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��"Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��![�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man��� U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I�� Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC�� ]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE�� Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%�� Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postun ! � ] �3 � 4 � � E � � � � ? � ����(���`�$��w# � e��QyU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��Py+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��Oy{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��Ny� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��MyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Lm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Ky! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��Jm �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��IoC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��Hm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��G]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��FQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��E]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��D]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��C]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��B]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��A]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��@]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��?]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��>]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��=Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���<]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��;]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��:]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��9]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��8] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��7]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��6]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��5]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��4]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���3]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��2] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��1]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665) ` �.� e � � o � 1 � l ��P�D �P�U�p � ` _��m]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��lMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��k]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��j]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��im% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��hE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��gE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��fm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��ee? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��dm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��cm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���b[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��amw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��`EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��_E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��^m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��]{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��\yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��[yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Zy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���Yy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��Xy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��Wy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��Vm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��Um�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��Tm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��Se? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��Ry �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586) * � ��" � � ! � � , � � F � � 2 � .x'��O��:�z �L�}8�u��" � � N��]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml�� cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg�� co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb�� ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y�� _W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L�� _= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��~_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��}_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��|]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��{]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��z]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��y]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��x]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��w]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��v]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��u]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��t]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��s_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��rE �Tim Powers <timp@redhat.com>>.��- rebuilt]��q__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��pc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��o_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��n_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others. ! � �}7��K � b � 8 � o 8 � � A � C�S��)�� ��; � ~��8s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��7{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��6{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��5{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��4s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���3Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��2Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��1Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��0Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��/Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��.Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��-Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���,Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��+Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��*QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��)Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��(_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��'_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��&_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��%K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��$_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��#_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��"_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��!_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]�� __ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen��� _�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY�� ]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3�� K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU�� eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libs � M � E � �<�`�H���� � �z��Ik� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��Hs) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��Gk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��Fu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��Es�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��Ds� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Cq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��BqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��Aqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��@qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��?q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���>k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��=e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��<k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��;k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��:k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��9s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear � � � � � �x�e��o4�M�D � `��^mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��]ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���\k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��[kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Zq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��YS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��Xo�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���Wm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��Vm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��Um� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��TcA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��Sm� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��Rm�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��Qm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���Pm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��Om�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��Nm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Mm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Lm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Kk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��Jk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed). c N� � � j s {�CA�E c �]��mu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��lm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��km? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��jm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��im� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���hm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��gm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��fm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��em�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��dm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��ck�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��bkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��ak�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��`qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��_k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816) z �H� � � � 4 s ��{s<�!z �"��q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �� q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��~q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���}q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��|qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��{s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��zs�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��ys� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��xsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��ws� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��vsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���us� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���tm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��ssk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��rm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���qm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��pyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��ouY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��n{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild F � [ � < � T � l��'PV$\�]F � F V��cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg�� co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q�� c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)��� c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I�� c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version�� c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075) � ,� � � U | z�d�U�M�4� � � �F��.c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��-eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��,a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��+eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��*ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��)a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��(mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��'a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��&_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��%cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��$_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��#c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��"c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���!_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r�� c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T�� _�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P�� _E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H�� [�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��� [�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802) � � � B � p � / � Y�V��6�D��`�_]�R � ���Ig�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��HcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��G�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��Fg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��Eg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���Dg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��Cgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Bc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��Ac� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��@g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���?g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��>g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��=gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��<gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��;cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���:g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��9cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��8cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��7c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���6g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��5c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���4g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��3g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��2g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��1g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��0c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��/g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853) U r �8 � � Y ����L��c�Ny�g�u � U � ��ba�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��a]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���`e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��_ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��^ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��]e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��\c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��[g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Zc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��YgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��Xc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��Wg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��Vg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��Ug; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��TcS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���Sc�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��Rc�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��Qc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���Pc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��Oc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��Nc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Mcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Lce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Kce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��Jg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431) � �G�y � T � � r � � X����8�A�rI�T��5 � � X�� sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��~aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��}[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��|gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��{ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��zk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��yg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��xi[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��wem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��veG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���ui�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��te� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��se� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���ri� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��qie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��piq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��oe} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��ne� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��me� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��lek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��keq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��je� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��ie} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��hi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��ge�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��fam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��e]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��daO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��caY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995) � n�i q � * � � h�4?��n�I�|�7 � � J��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p�� [� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ�� g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a�� i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)��� i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��� e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)����!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.h } �_ � h � L � � � C P�p �_�I��z��GH�� } ���7e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��6e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��5aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��4aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��3a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��2a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��1[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��0g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���/e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��.c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��-c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��,a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���+a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��*a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��)a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��(_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��'_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��&[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��%[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��$[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���#i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��"i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��!i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)��� i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� �� i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W�� eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682) u �i < � ) � % � p � � + � 1�<��&�M��#�t y%u �+��Wg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��VaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���Ua�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��Ta� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��Sa= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��RaW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��QaU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��PaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��OY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��N[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Mg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Lga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��KgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��Jg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��I[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��H�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��Ggy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��Fe= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��Ee�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��De �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Ce3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Bc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��Aak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��@a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���?e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��>a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��=a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��<a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��;a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��:a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��9[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��8g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1 � V � � � � F � D � � �0 �E�<�5�^�p�J � ���sg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��rgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��qg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��pa5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��o�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��ns} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��maU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���l[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��k[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��j[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���i[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��h[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��g[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��f[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��egS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���dg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��cg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��bg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��aeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��`e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��_eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��^ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��][q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��\[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��[[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��Z[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��Yg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��Xg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049) � ,�< � � � � � I � `�/�U���p�h���$ � k��gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z�� g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP�� g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog��� g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a�� ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �� a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\�� cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��~a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��}aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��|g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��{a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��zg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���y[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��x[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��w[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���v[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��uc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��tg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings g ~�� � � M g � ( � h �]~��C;�!Z g �n��(g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��'g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��&gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��%g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���$g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��#k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��"gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���!g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y�� g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z�� g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P�� e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f�� gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I�� c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack S v �l � � ` � = � : m ��*�(�9��� �E � S {��Go� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��Fos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��Eou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��DoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Coo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Boy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���Ao�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���@o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��?o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��>o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���=o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��<oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��;oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��:o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��9o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��8o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��7g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��6g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��5g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��4gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��3g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��2g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��1gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��0g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��/g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��.g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��-gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��,g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��+g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��*gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���)g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475) � � �L � ( � ^ � e � < � J��2}.�-�+�L�k � � p��gwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��fwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��eso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��dw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��cu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���bu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��auw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��`uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��_u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��^u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��]u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���\u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��[u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��Zo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��Yo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��Xo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��Wo; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��Voi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��Uo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��Too �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��So�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��Ro� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��Qoi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���Po� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��Ouu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��No3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Mo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Lo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��KoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��Jog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��Ioa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��Ho �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637) � � � \ � Y � d � T � WX�x�f�^�P��y�` � � ��� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��~}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���}{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��|{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���z{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���y{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���x{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��wwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��u{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��t{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��s{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��rwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��qw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��pw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��owq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���nw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��mw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���l}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��ks�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��jws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��iwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��hw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477) ! � �I � g � � � T � R � Lf� �]��V���m�\��+ � X��$U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��#K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��"]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��!S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)��� ]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C�� U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3��� S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;�� S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g�� S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W�� Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf�� G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W�� Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>���� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 # _ e � � P � � � U � � M ��>�3���n���P�>��> � _ ���G]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��F]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��E]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��D]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��C] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��B]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��A]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��@]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��?]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���>]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��=] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��<]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��;]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��:M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��9]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��8] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���7]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��6]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��5]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��4]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��3] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��2]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��1M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��0eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��/ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��.Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��-Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��,[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���+U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��*Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��)]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��(Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��'Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��&[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���%[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linux � �N� � � � � 7 � � � o )�3��2�K�}.��8 � ���dy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��cy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��by�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��am�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��`m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��_m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��^e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��]y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��\yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��[y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��Zy{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��Yy� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��XyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Wm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Vy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��Um �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��ToC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��Sm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��R]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��P]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��O]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��N]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��M]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��L]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��K]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��J]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��I]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��HY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf ! S V��@ � � u i 0 � u � z <��;�� �F�^�c � S t��]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��~_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��}E �Tim Powers <timp@redhat.com>>.��- rebuilt]��|__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��{c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��z_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��y_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��x]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��wMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��v]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��u]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��tm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��sE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��rE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��qm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��pe? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��om] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��nm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���m[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��lmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��kEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��jE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��im �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��h{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��gyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��fyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��ey�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. , � �d�` � Y " � � � l � � O � ~ �j�L �T �n7��<� �F��) � � Q��1_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��0K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��/_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��._C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��-_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��,_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��+__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���*_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��)]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��(K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��'eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��&Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��%]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��$K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��#]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��"]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��!]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb�� ]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB�� ]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H�� e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW�� cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi�� eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3�� K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup � �^�` � p 8 � F � � *;�X�#m^ � y��He� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��Gk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��Fk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��Ek�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��Ds�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��Cs� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��B{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��A{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��@{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��?s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���>Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��=Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��<Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��;Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��:Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��9Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��8Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���7Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��6Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��5QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��4Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��3_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��2_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps * � 1 � U � = � ������F< � *~��Ym� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Xm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Wm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Vk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��Uk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��Tk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��Ss) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��Rk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��Qu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��Ps�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��Os� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Nq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��MqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��Lqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��Kqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��Jq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���Ik�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � 6 � , ���*�0�]�?P��_ � � ��pm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��om_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��nk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��mkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��lk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��kqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��jk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��imW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��hok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���gk�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��fkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���eq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��dS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��co�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���bm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��am�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��`m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��_cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��^m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��]m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��\m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���[m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��Zm�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled � [ � � � O ���8��� � ��� s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��~sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��}m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���|m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��{yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��zuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��y{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��xu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��wm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��vm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��um�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��tm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���sm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��rm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��qm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc S ��} � j � | � � ��u�B�#�;� � S ���c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m�� }�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"�� q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �� q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��� q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2�� q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config V � � � � � � } ���4�[���/ V �T��*_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��)_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��([�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���'[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��&[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��%[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��$[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��#cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��"cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��!c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin��� c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)��� c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o�� c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C�� c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-�� c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600) Z ��� W � � � 4 � � W�1f#e�l�)� � Z a��Dcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��CcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��Bc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���Ag�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��@c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���?g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��>g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��=g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��<g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��;c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��:g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��9c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��8eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��7a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��6eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��5ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��4a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��3mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��2a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��1_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��0cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��/_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��.c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��-c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���,_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��+c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306) X b��B � P � � l � k i �^�5�i�X� � X �O��]c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��\c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���[c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��Zc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��Yc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Xcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Wce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Vce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��Ug�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���Tg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��ScE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��R�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��Qg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��Pg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���Og�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��Ngq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Mc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��Lc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��Kg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���Jg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��Ig? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��HgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��GgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��Fcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���Eg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails � g �o ) � 9 � � : � h�b�a�9���2�P� � k��{iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��ze} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��ye� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��xe� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��wek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��veq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��ue� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��te} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��si� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��re�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��qam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��p]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��oaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��naY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��ma�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��l]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���ke�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��jek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��iic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��he�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��gc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��fg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���ec�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��dgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��cc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��bg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��ag% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��`g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��_cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���^c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires � � O � X � � ` � k��L��i� ��) ���i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)��� �!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� �� e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX�� sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR�� aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW�� aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��� i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��~e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���}i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��|ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patch q � � / h h � j j�o!�&�2���m��d q �n��0[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��/[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���.i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��-i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��,i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���+i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��*i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��)e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��(eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��'e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��&e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��%e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��$e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��#e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��"e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���!e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%�� a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR�� gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls�� e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends��� a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��� � � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac) ! ^ � � r � � J * � D ���0�-��Ii�V�R��X � ^ O��Qe= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��Pe�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��Oe �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Ne3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Mc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��Lak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��Ka5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���Je�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��Ia� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��Ha�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��Ga} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��Fa�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��Ea5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��D[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��Cg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���Be�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��Ae� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��@aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��?aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��>a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��=a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��<[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��;g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���:e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��9c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��8c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��7a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���6a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��5a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��4a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��3_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��2_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��1[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig] t �� � [ � � � O � � C � H�D��*�c��*�(�^ � t [��pgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���og�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��ng� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��mg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��leW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��ke�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��jeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��iey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��h[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��g[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��f[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��e[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��dg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��cg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��bg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���`a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��_a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��^a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��]aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��\aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��[aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��ZY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��Y[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Xg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Wga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��VgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��Ug5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��T[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��S�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��Rgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch merged f �� } � � . � @ � ��m��3�Sf�W�T�{ � f Y��gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3�� g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u�� i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\�� cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��� i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v�� a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO�� c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���~g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��}gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��|g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��{a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��z�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��ys} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��xaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���w[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��v[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��u[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���t[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��s[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��r[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��q[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot @ �� � � � � � R�a�f���0J� �K��@ P��)e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��(gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��'c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��&cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��%e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��$a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��#a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��"a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���!a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z�� a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U�� aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c�� ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��� a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544) � ! � � 7 � � / �� ��v�j�G�Dw( � K��Bg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��Ag3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��@g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��?gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��>g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��=g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��<gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��;g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��:g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��9g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��8gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��7g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��6g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��5gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���4g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��3g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��2g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��1gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��0g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���/g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��.k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��-gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���,g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��+g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��*g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688) ` [ � Y � j � J � 6 � O�v� �4��Y�W�d�O � ` j��aoi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��`o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��_oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��^o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��]o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��\oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���[o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��Zuu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��Yo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Xo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Wo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��VoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��Uog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��Toa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��So �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��Ro� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��Qos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��Pou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��OoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Noo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Moy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���Lo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���Ko� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��Jo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��Io�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���Ho� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��GoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��FoK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��Eo�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��Do�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��Co�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517) # �V�: R � Q � O � p � � $�@�K�b�(�%�0 �# g��{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��~{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��}wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��|w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��{w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��zwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���yw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��xw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���w}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��vs�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��uws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��twi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��sw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��rwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��qwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��pso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��ow[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��nu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���mu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��luw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��kuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��ju� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��iu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��hu[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���gu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��fu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��eo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��do�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��co3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��bo; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warnings � �! � | � � 5 � "� yq�i�[����j � � ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)��� q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) < �0 � J � � J � C � -�{ m� �|��" � < m��2{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��1{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakez��0�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��/s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��.s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���-s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���,}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��+}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���*}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��)}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���({�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��'{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��&{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��%�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��$s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���#s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���"}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��!}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�� {k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�8���'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 � c� � � r � � � F�3��=��&� � �?��I}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���H{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��G{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�#��F�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��E�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ds� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Cs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Bs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���A}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��@}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���?}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��>}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���={�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��<{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��;�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��:s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��9s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���8s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���7}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��6}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���5}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��4}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���3{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � a�Z � D � y Q ��z�`����/ � ���^}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��]}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��\� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��[�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��Z�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��Y�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Xs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Ws�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Vs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���U}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��T}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���S}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��R}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��Q�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��P�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Os� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Ns�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ms� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���L}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��K}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���J}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��r � � � - f�_�I�~V�k � �/��r��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��q� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��p�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��o�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��n�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ms� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ls�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ks� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���j}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��i}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���h}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��g� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��f�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��e�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��d�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��cs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��bs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���as� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���`}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��_}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220) � a�Z � D � y Q �f�>�$�H��� � �#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��~}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��}��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��|� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��{�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��z�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��y�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��xs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ws�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���vs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���u}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��t}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���s}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � L�% � | / � ����7� �A�� � �>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11 4 �$ q � ' � � F [3����4 z��-�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��,s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��+s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���*s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��)�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��(��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��'��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��&� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��%�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��$�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��#�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��"s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��!s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�2�� �'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.�� ��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/�� ��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�` � 464ff71e326a3c61a84b0ecd634cb409149b52eb55b33c3912d9c30946d2a89fD�_ � ffbb15542be4a544ba41f9b5fd5f4859e675722944e668b3449000f4ad2cc257D�^ � 2d21255fb420721979ebc74671c18970c707ad3fcb8f2be897330ba4329f57c5D�] � 2c01b65b5f6aa87f7142fb91dea99d39772f6930f2e5a95f1186d81c1b902e10D�\ � 65629b83ab33e7a3aa3a6149d5e4af0b6422d86a0b65f024ce684175bfa446d1D�[ � 0b45119677459aad66b41b964f9fb5ea71016e3aa8208ee115b8c6260b56212bD�Z � 23ffe440cea772a8b2fb843d8f8af3fde6f2c2893ad8c8324b4dd34f6f871ab0D�Y � b3bc760a1d620f0d69a57442d19f3ad75c3207d49fb48e4530778c641e62af35D�X � d0a33079ce2e2dd6e1dd1f6db0851cc13078089089a991b1d179258edd91bba4D�W � 3a232460ef44fa06e1619e6f8f1aacaf661b9aee9b04d3d2a1fa17189aede0d1D�V � 7e13451a38aed1b6c887a578e6c8f2ffc2ed44ea86bd20e38251fe93709f4e69D�U � 88dfe9070a7c02fe25928089d0534fe00ea7aa5ed0a6b660495a57415c782433D�T � 89611d7cbb1ca71abd0364126f6eed1beb6f18ee387483a67dc84dbb8e4f45c8D�S � dcf426708aa1f9ad17cb977b232e12f151c806b82342df9e58241904547f119bD�R � 5ace25618ddc1512277f9ca5e73b4b89208baa7f7a64ad9b46545b1741ea55f1D�Q � a16d85096941a82e85f478cfcfe8e30889be844af8bfc8a90dae0f7c6b793f96D�P � e0ed0324ab6f5c6e7f031cf6cb012cc117f790dd7029f50c3d57f50809add8fbD�O � 82408d77cac4406633f6cb03a3e6705396b56c165f6716e31968d21d979153ddD�N � a2da4b3247c227a794155c726f0eee67635c66ae74d33115a16a9ee64d975b4bD�M � 67fc123d2f4e41846fd5f0b1ad9603002ba5290360b22f71a347af56f63101f9D�L � 1fbbb65393c3866acc5671f2f0b8c085a4fd62f1e25268b9035f00362f4839f5D�K � b112438233ea1b91063e858acc9e0075b457a799f03bdced32732e447d5808e0D�J � d4a1e4c18126596f79c769e14d7827a5e8497441ab8b9dec3efa3fd12cb0fa16D�I � 2d6be3132bfc89f592ef229fe2be29c7a195498325abaaddb0c6df903f304be3D�H � d8b59dbb82dfa62cc44a78e28d2f716c57cb108c5876089e348c48ae2b2d77e1D�G � 8c616092cb5b6e6a78fa3f0b4b2a01ed4d55403ce371dacc1ea3453abe6fe2a5D�F � b2c6292d77659b65909f8b9a4b15cfc9ab1d2666a63cece2f247b7745d57c04eD�E � 7265cb1734cceb2f2ad71b9196a56f552ddbd8fa4f44421e715e02db20444504D�D � 54c068b1c015962c0d55edb5ec183d8fc038aecd0c31bc1116dfa1e10b962946D�C � 42d8c0b57e7313b982b728f61ed65834546bfce17aef10d22129fd214c3a1767D�B � b140d5f83a4d2f0fd3a8b87829a826dc6242576d5fa12e11b60856042560f5bbD�A � eced85db9b6011733d574a9fc509803f1e3f92c6e2c90a92b16bd19245c09405D�@ � 8f61d4ac9334ad928c603e212f6945a96aa90d4493d71372fed1a8de2ef60c83D�? � ea4e20d3f2fad73a1ee791e46480c798fb2af82bdd4ff05e269fbe869f1de4fdD�> � 472ff77d3d17eaa3188db5912bede509c1b22606a112a52caf9cedf8c11fdf1cD�= � 1a4fffc0db4ef7212f5a363429be857d6390dd12c9d1dc68ea0dcd68cf6348b0D�< � ad7279ae77bb73dd20fdca8a514a689c3c789a48257866d5b278ad1067cbd125D�; � 565d574fdea50b3103763ff14cf35b432fc80a4e020b1f7f252f5f5dbd1c4ae9D�: � bd1ff31fe4bd8e822853fd7be43896ed0985b67fe2dad6d5aad55587f294a086D�9 � 7a6fad2b87880510d5f17d7d5dfcb50e020ad06acb0b0bc1343d6ce637b4bee0D�8 � 9508ea4b5df5eb83ed247227901b59d334275a8d0774f4f41370e7f5ba5c19b0D�7 � 075db511f884114a3afc4f149359c400c8410bc933d91f24a17fa86a20901d80D�6 � 89330ac1cc818ff3fa0a5fa6095a8dab8fa8fbc88fadb5f1ee2758168ab20be8D�5 � 9cc6e1be48ffba61b6153d437c3628690210b228bb98795032863dc83247ec0eD�4 � 9e976427b5a4630b7d185e784d918ed356bc65cd724227ef5afb01a6c1bbe69bD�3 � 3093b8be19fe726a99f75de21f2de320c5c08bbaa948c81a3c927c58d969566dD�2 � 3a428ea3231d8b69f81c436c838feb7c789f95481a1d00da7a567313824a9c8aD�1 � 05e4f7041b921c4813786fb827ef30e5c7a28501a5f34261d8a4a76642292e41D�0 � f6730d282414aef1abd6a0a5b9b46ba451fb872016c372651ed1fb2c9462cfb0D�/ � 8109a2ed957f482d5b90d25cc2b6d48268aa58f795ad7e4d161db9e861aeacd4D�. � 615b8848aa6a6fd02d6753773bc4cb6b6b88b27b90b95d129510a90581254c86D�- � 4f86e74747af9c47d4209d4d7c02ddc72ab517675b454d28649dc21d2917dcc8D�, � 9a6f18eba069435ad1dd90a0636553a9939ab2acea3cf58c34871105dec61f57D�+ � 2d0a8c8cb0929c18b3190d6117eb0ad188378337f9e2f67b3ecb513e96c3806bD�* � 8a621fce09e02c20b5a5ac295421dba807ca8910ec8c03607af89a7a36fb053bD�) � 23bb0e83e9df1e735b4d59dadf5e1f3ffb5d9787a725560dc10c8900d4a606ed o � � 9 � � � !�E���� M� o �"��?�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��>�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��=��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��<��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��;� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��:�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��9�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��8�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��7s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��6s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���5s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�"��4�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��3�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��2��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��1��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��0� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��/�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��.�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file " � Q�o � � " � \ � Z � T n �$�e �^��u�d��3�< � W��a[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���`[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��_U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��^K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��]]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��\S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��[]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���Z]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��Y]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��XU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���WS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��VO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��UU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��TU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��SUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��RG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��QUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��PG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��OU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��NGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��MM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��LU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���KS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��JS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��IOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��HS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��GS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��FGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��EG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��DGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���CG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��BG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��AO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��@]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h> # � ��F x � � K � � C � x 4�)���d����F�4��4�U � b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��~] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��}]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��|]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��{]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��z]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���y]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��x] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��w]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��v]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��uM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��t]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��s] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���r]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��q]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��p]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��o]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��n] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��m]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��lM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��keO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��jek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��iY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��hQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��g[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���fU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��eQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��d]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��cQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��bQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %pre G ��V � � R � � Q | ! � ���8�{��/�39�V � G a��!yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%�� y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��� y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u�� y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(�� m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I�� QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente�� ]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S�� ]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489) " d �O �� x ? � � � � K �J��/-�U!�m%�r%�b � d ^��C_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��B]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��A]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��@]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��?]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��>]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��=]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��<]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��;]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��:]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��9_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��8E �Tim Powers <timp@redhat.com>>.��- rebuilt]��7__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��6c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��5_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��4_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��3]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��2MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��1]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��0]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��/m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��.E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��-E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��,m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��+e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��*m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��)m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���([�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��'mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��&EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��%E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��$m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��#{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��"yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574) + � �^�W � � j � � M � | � h �J��R �l5��:��D��'��H � K��n_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��m_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��l_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��kK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��j_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��i_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��h_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��g_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��f__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���e_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��d]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��cK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��beI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��aGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��`]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��_K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��^]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��]]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��\]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��[]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��Z]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Ye/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��XcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Weq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��VcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Uc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��TcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��Scy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Rco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Qce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��P_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��O_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��N_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��M_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��L_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��K_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��J_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��I_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��HK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��G_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��F_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��E_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��D_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL k U� � � d � � c ��r��x�� � k ���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1�� k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��~s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��}{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��|{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��{{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��zs�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���yQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��xQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��wQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��vQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��uQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��tQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��sQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���rQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��qQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��pQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��oQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775 L I � m U � � ����^T�B L �q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i�� k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,�� u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%�� s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz�� s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-�� q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � z� � , � " � � � �&�S�5F��U� � �s��,m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��+m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��*m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��)k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��(kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��'k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��&qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��%k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��$mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��#ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���"k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��!kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��� q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7�� S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �� o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��� m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m�� m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. [ S � � � G ���0����{ [ �<��=s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��<sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���;s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���:m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��9sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��8m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���7m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��6yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��5uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��4{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��3u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��2m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��1m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��0m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��/m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���.m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��-m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition � � � � � = �� b�C�[� s � � g��Sco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Rc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Qc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Pc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Oc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Nc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Mc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Lc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Kqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Jq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Iq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��H}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��Gq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Fq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Eq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Dq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Cq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Bqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��As� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��@s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��?s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��>sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage 4 �� � � � ] � ����;��c6 � 4 ���g_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��fc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��e_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��d_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��c[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���b[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��a[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��`[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��_[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��^cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��]cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��\c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���[c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���Zc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Yc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��Xc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Wc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Vc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Uc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Tcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin script T �Y � � � 6 � ! � Y � 3h%g�n�+� �\ � T f��cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��� g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��~cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��}c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���|g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��{c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���zg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��yg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��xg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��wg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��vc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��ug� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��tc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��seu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��ra� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��qeY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��pee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��oa�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��nmU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��ma�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��l_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��kcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��j_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��ic�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��hc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878) j �J�X � � t s q % � f�=�q`�$�` � j Y��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e�� �1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH�� g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)��� g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j�� gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscript � �e � / � � 0 � ^ � X�W��/� ��(�F��6 � ���8i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��7ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��6iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��5e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��4e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��3e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��2ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��1eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��0e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��/e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��.i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��-e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��,am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��+]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��*aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��)aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��(a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��']� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���&e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��%ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��$ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��#e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��"c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��!g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��� c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W�� gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]�� c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`�� g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D�� g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanup � �@ � I � z Q � \ � � =���Z������ � J��Rg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Qi�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Pi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Oe�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Ng�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Mc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Lc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Ka�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Jak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Iag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���H�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Ge�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��FsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��EaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��DaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��C[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Bgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Aku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��@k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��?g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��>i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��=em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��<eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���;i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��:e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��9e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet q c � : � � H � �U�Z�f �-�<����H � q P��n_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��m_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��l[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��k[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��j[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���ii� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��hi5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��gi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���fi�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��ei�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��de3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��ceM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��be3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��ae�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��`e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��_e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��^e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��]e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���\e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��[a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��ZgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Ye� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���Xa�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���W� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��V[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��U[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��T[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��S[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms | �C�- � ~ ^ � x + , � d�a�}�,��9�N ��� | � ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn�� gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO�� e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"�� e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp�� e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��~g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���}e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��|e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��{aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��zaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��ya� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��xa5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��w[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��vg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���ue�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��tc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��sc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��ra� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���qa�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��pa{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��oa5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1 x !�q � 2 � e � Y � ^ Z��@�y�@�>�t�� x � ��,[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��+gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���*g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��)g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��(g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��'eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��&e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��%eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��$ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��#[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��"[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��![W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'�� [�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?�� g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%�� g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+�� g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP�� aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings i �'� � � @ � R � , ����E�ex�i�f��x � i � ��Km�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Jg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��IgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Hg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Gi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��FcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Ei�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Da� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��CaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Bg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��Aa�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��@g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���?[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��>[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��=[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���<[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��;c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��:g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���9g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��8gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��7g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��6a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��5�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��4s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��3aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���2[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��1[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��0[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���/[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��.[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��-[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch p , � � � � a � p�u���?Y��Z �O p �Z��eg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��de? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��cgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��bc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��acq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��`e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��_a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��^a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��]a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���\a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��[a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��ZaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Ya� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Xai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Wa�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Vg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Ugs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Tg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Sg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Rg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Qg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��Pae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Oa�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Nm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Mm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Lm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) p �p � � � � � _��U��I��&#V�� p � �� o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��~o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��}g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��|g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��{g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��zgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��yg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��xg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��wgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��vg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��ug3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��tg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��sgq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��rg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��qg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��pgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���og�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��ng�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��mg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��lgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��kg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���jg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��ik3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��hgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���gg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��fg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �<� � ~ � 2 � K � S�|[��*�1���Q�I � c�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0�� o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S�� o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj�� oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o�� os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p�� ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a�� oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot � � � � 6 � U � w � �(x�r�u�E�T��r � ���>{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��=wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��<wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��;{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��:{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��9{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��8wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��7w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��6w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��5wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���4w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��3w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���2}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��1s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��0ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��/wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��.w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��-wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��,wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��+so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��*w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��)u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���(u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��'uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��&uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��%u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��$u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��#u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���"u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��!u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packages � w�o � a � � � � q � 2�P�m�=��;�5O���F � � C��^U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��]Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��\G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��[UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��ZG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��YU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��XGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��WM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��VU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���US�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��TS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��SOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��RS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��QS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��PGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��OG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��NGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���MG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��LG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��KO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��J]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��I� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Hq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���G}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��F}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���E}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��D}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���C{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��B{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��A{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���@{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���?{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) " � ��N � � A � z � (��n�=�s �k*��\�Q� � p�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��~]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��}] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���|]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��{]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��z]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��y]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��x] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��w]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��vM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��ueO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��tek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��sY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��rQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��q[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���pU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��oQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��n]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��mQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��lQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��k[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���j[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��iU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��hK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��g]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��fS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��e]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���d]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��c]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��bU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���aS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��`O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��_U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postun ! � ] �3 � 4 � � E � � � � ? � ����(���`�$��w# � e��!yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P�� y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x�� y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F�� y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb�� yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"�� m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H�� Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf��� ]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@�� ]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665) ` �.� e � � o � 1 � l ��P�D �P�U�p � ` _��=]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��<MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��;]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��:]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��9m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��8E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��7E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��6m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��5e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��4m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��3m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���2[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��1mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��0EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��/E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��.m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��-{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��,yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��+yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��*y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���)y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��(y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��'y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��&m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��%m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��$m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��#e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��"y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586) * � ��" � � ! � � , � � F � � 2 � .x'��O��:�z �L�}8�u��" � � N��g]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��f]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��e]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��d]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��ce/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��bcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��aeq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��`cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��_c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��^cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��]cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��\co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��[ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��Z_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��Y_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��X_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��W_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��V_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��U_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��T_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��S_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��RK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��Q_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��P_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��O_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��N_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��M_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��L]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��K]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��J]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��I]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��H]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��G]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��F]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��E]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��D]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��C_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��BE �Tim Powers <timp@redhat.com>>.��- rebuilt]��A__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��@c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��?_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��>_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others. ! � �}7��K � b � 8 � o 8 � � A � C�S��)�� ��; � ~��s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx�� Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��~Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��}Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���|Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��{Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��zQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��yQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��x_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��w_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��v_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��uK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��t_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��s_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��r_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��q_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��p__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���o_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��n]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��mK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��leI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��kGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��j]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��iK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��h]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libs � M � E � �<�`�H���� � �z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y�� e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8�� k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M�� k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1�� k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.�� s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear � � � � � �x�e��o4�M�D � `��.mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��-ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���,k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��+kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���*q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��)S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��(o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���'m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��&m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��%m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��$cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��#m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��"m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��!m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q�� m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �� m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed). c N� � � j s {�CA�E c �]��=u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��<m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��;m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��:m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��9m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���8m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��7m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��6m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��5m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��4m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��3k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��2kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��1k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��0qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��/k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816) z �H� � � � 4 s ��{s<�!z �"��Qq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Pq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Oq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Nq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Mq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Lqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��Ks� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��Js�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��Is� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��HsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��Gs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��FsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���Es� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���Dm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��Csk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��Bm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���Am�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��@yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��?uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��>{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild F � [ � < � T � l��'PV$\�]F � F V��hcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��gcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��fc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���ec�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���dc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��cc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��bc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��ac�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��`c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��_c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��^cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��]co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��\c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���[c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Zc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Yc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Xc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Wc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Vc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Uqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Tq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Sq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��R}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075) � ,� � � U | z�d�U�M�4� � � �F��~c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��}eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��|a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��{eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��zee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��ya�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��xmU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��wa�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��v_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��ucg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��t_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��sc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��rc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���q_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��pc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��o_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��n_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��m[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���l[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��k[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��j[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��i[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802) � � � B � p � / � Y�V��6�D��`�_]�R � ���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\�� gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR�� gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf�� cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��� g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa�� cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853) U r �8 � � Y ����L��c�Ny�g�u � U � ��2a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��1]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���0e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��/ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��.ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��-e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��,c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��+g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���*c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��)gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��(c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��'g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��&g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��%g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��$cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���#c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��"c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��!c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��� c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+�� c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �� c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j�� cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431) � �G�y � T � � r � � X����8�A�rI�T��5 � � X��PsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��OaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��NaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��M[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Lgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Kku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Jk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��Ig�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��Hi[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��Gem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��FeG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���Ei�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��De� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��Ce� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���Bi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��Aie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��@iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��?e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��>e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��=e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��<ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��;eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��:e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��9e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��8i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��7e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��6am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��5]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��4aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��3aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995) � n�i q � * � � h�4?��n�I�|�7 � � J��he3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��ge�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���fe�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��ea�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��dgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��ce� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���ba�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���a� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��`[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��_[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��^[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��][� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��\g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��[i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Zi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Ye�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Xg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Wc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Vc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Ua�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Tak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Sag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���R�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Qe�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.h } �_ � h � L � � � C P�p �_�I��z��GH�� } ���e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw�� g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��~c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��}c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��|a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���{a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��za{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��ya5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��x_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��w_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��v[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��u[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��t[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���si� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��ri5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��qi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���pi�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��oi�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��ne3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��meM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��le3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��ke�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��je� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��ie� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682) u �i < � ) � % � p � � + � 1�<��&�M��#�t y%u �+��'g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��&aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���%a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��$a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��#a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��"aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��!aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y�� aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l�� Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b�� [m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo�� g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b�� ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� �� a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m�� a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[�� a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C�� [/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1 � V � � � � F � D � � �0 �E�<�5�^�p�J � ���Cg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��Bgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��Ag� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��@a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��?�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��>s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��=aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���<[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��;[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��:[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���9[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��8[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��7[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��6[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��5gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���4g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��3g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��2g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��1eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��0e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��/eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��.ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��-[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��,[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��+[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��*[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��)g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��(g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049) � ,�< � � � � � I � `�/�U���p�h���$ � k��_gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��^g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��]g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��\g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���[g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��Zae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Ya�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Xm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Wm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Vm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Um�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Tg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��SgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Rg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Qi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��PcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Oi�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Na� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��MaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Lg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��Ka�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Jg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���I[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��H[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��G[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���F[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��Ec? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��Dg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings g ~�� � � M g � ( � h �]~��C;�!Z g �n��xg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��wg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��vgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��ug�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���tg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��sk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��rgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���qg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��pg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��og�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��ne? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��mgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��lc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��kcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��je? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��ia� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��ha� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��ga�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���fa�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��ea�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��daM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��ca� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��bai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���aa�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��`g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack S v �l � � ` � = � : m ��*�(�9��� �E � S {��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal��� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a�� oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[�� oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �� o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.�� o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��~g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��}gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��|g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��{g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��zgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���yg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475) � � �L � ( � ^ � e � < � J��2}.�-�+�L�k � � p��7wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��6wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��5so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��4w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��3u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���2u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��1uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��0uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��/u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��.u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��-u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���,u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��+u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��*o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��)o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��(o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��'o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��&oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��%o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��$oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��#o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��"o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��!oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses�� uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637) � � � \ � Y � d � T � WX�x�f�^�P��y�` � � ��S� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Rq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���Q}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��P}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���O}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��N}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���M{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��L{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��K{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���J{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���I{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���H{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��GwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��Fwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��E{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��D{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��C{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��BwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��Aw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��@w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��?wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���>w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��=w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���<}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��;s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��:ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��9wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��8w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477) I �e � � x � b%�?��?�8�"�W � I ���l{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��k{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��j�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��is� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��hs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���gs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���f}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��e}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���d}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��c}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���b{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��a{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��`{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��_�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��^s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���]s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���\}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��[}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���Z}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��Y}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���X{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��W{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��V{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���U{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���T� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 � <�) � � 3 � ��*�#� �BW/ � ���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#�� � �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��~�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��}�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��|s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��{s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���zs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���y}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��x}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���w}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��v}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��u�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��t�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ss� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��rs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���qs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���p}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��o}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���n}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��m}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � ��r � � � - Q�J�4�iA~V � �/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/�� ��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#�� � �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220) � M�3 � W � � ��_�!�E��� � �#��(� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��'�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��&�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��%�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��$s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��#s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���"s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��!�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.�� ��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/�� ��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#�� � �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9 � L� � � i * � G � � �~�)���� �tU�{0 � ���G]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��F]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��EU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���DS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��CO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��BU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��AU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��@Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��?G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��>UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��=G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��<U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��;Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��:M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��9U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���8S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��7S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��6Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��5S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��4S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��3Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��2G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��1Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���0G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��/G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��.O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��-]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��,�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��+�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��*��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��)��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11 " � �$�] f � � Q � � �V��N ��?�4���o���Q � �)��i]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��h]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��g]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���f]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��e] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��d]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��c]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��bM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��a]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��`] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���_]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��^]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��]]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��\]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��[] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��Z]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��YM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��XeO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��Wek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��VY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��UQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��T[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���SU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��RQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��Q]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��PQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��OQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��N[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���M[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��LU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��KK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��J]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��IS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��H]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063) � �\�X � q � � a � � ]��\�,�����C���: � �J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb�� yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��~y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��}m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��|oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��{m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��z]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��yQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��x]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��w]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��v]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��u]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��t]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��s]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��r]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��q]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��pY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���o]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��n]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��m]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��l]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��k] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��j]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503) � SY v � g � p 2 � w ��?�.��g �^��� � � 0��%E �Tim Powers <timp@redhat.com>>.��- rebuilt]��$__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��#c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��"_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��!_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._�� ]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO�� MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V�� ]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W�� ]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G�� m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%�� y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��� y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u�� y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(�� m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009) , � �L�Q � A � � C � � � � c � R �=��*�O��U��A��M��x2�}F � Y��Q]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��PK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��OeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��NGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��M]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��LK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��K]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��J]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��I]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��H]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��G]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Fe/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��EcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Deq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��CcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Bc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��AcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��@cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��?co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��>ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��=_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��<_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��;_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��:_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��9_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��8_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��7_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��6_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��5K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��4_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��3_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��2_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��1_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��0_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��/]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��.]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��-]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��,]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��+]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��*]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��)]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��(]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��']/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��&_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes b t�J � � J � � S � U � e -�;�� 0��M� b �1��mk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��ls�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��ks� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��j{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��i{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��h{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��gs�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���fQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��eQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��dQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��cQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��bQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��aQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��`Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���_Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��^Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��]QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��\Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��[_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��Z_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��Y_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��XK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��W_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��V_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��U_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��T_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��S__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���R_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killall � � � t \ � : � c�3 Xj6 � x��~k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��}k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��|k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��{s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��zk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��yu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��xs�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��ws� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��vq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��uqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��tqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��sqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��rq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���qk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��pe� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��ok� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��nk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs 4 � f � � h � � �u����A�# 4�j��k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today��� q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7�� S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �� o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��� m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m�� m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �� m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms B �w � � � P N'�Rp!�YB ���$m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��#yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��"uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��!{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]�� u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy�� m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT�� m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"�� m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � D � L � b � > � + � =�j�O�6� � n��8qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��7q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���6q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��5}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��4q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��3q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���2q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��1q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���0q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��/qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��.s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��-s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��,s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��+sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��*s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��)sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���(s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���'m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��&sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��%m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. _ S�k � � � > g m;s t]'�]�� _ �z��N[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��M[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��L[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��KcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Jcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Ic� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Hc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���Gc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Fc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��Ec�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Dc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Cc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Bc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Acc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��@co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��?c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���>c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��=c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��<c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��;c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��:c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��9c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � S z x � b�S�K�2�����" � � ��eg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��dg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��cc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��bg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��ac�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��`eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��_a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��^eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��]ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��\a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��[mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��Za�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��Y_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��Xcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��W_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��Vc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��Uc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���T_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��Sc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��R_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��Q_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��P[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���O[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup ^ T� } � B � : � � / ��%�@��_��w�=� � ^ ���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j�� cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��~ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��}g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���|g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��{cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��z�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��yg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��xg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���wg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��vgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��uc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��tc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��sg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���rg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��qg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��pgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��ogA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��ncm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���mg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��lcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��kcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��jc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���ig�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��hc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���gg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��fg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � � < � F � � G e u� v� ���C�u�P � o�� e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)��� c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W�� gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]�� c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`�� g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D�� g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � ��' � � w � � W�`��h�s�T��q � � o��9c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��8a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��7ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��6ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���5�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��4e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��3sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��2aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��1aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��0[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��/gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��.ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��-k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��,g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��+i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��*em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��)eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���(i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��'e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��&e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���%i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��$ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��#iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��"e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��!e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht�� e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f�� ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i�� eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}�� e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) c ,� � j � 6 A ��p�K�~�9�����A � c � ��Ri�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��Qe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��PeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��Oe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��Ne�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��Me� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Le� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��Ke3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Je�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���Ie�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Ha�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��GgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Fe� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���Ea�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���D� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��C[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��B[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��A[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��@[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��?g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��>i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���=i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���<e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���;g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��:c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set T t� � k x � D � � � q #��'�op�.�U��p � T v��qa� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��pa�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��oa} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��na�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��ma5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��l[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��kg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���je�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��ie� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��haq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��gaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��fa� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��ea5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��d[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��cg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���be�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��ac[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��`c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��_a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���^a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��]a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��\a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��[_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��Z_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��Y[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��X[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��W[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���Vi� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��Ui5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��Ti] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���Si�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) } v)�> � | � � l � = � w �.�t�Q�v� X�Q � } d��[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'�� [�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?�� g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%�� g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+�� g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP�� aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo�� g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��~gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��}g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��|[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��{�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��zgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��ye= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��xe�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��we �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��ve3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��uc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��tak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��sa5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���re�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript � �/�- � c � y g � � � ~!���� 9�I��!� � �h��.a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��-g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���,[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��+[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��*[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���)[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��(c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��'g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���&g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��%gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��$g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��#a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��"�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��!s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y�� aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��� [�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��� [�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch merged J G�w � � ] � � �����R�a�f���0 J �a��Ja�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Ia�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Ha�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��GaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Fa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Eai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Da�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Cg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Bgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Ag� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��@g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��?g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���>g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��=ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��<a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��;m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���:m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��9m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��8m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��7g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��6gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��5g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��4i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��3cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���2i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��1a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��0aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��/g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666) � D�m � J � � � -��%�� v �l��`� ]��dgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��cg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��bg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��ag3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��`gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��_g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��^g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��]gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���\g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��[g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��Zg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��Ygk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��Xg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���Wg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��Vk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��UgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���Tg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��Sg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��Rg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��Qe? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��Pgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��Oc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��Ncq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��Me? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��La� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Ka� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��~oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��}og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��|oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��{o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��zo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��yos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��xou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��woW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��voo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��uoy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���to�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���so� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��ro� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��qo�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���po� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��ooW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��noK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��mo�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��lo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��ko�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��jg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��ig3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��hg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��ggM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��fg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��eg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x�� w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��� }� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+�� s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys�� ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n�� wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0�� o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S�� o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj�� oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr L y� � t � w x � ��~ p� ���A�_�| � L g��>S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��=Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��<G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��;Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���:G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��9G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��8O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��7]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��6� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���5q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���4}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��3}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���2}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��1}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���0{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��/{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��.{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���-{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���,{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���+{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��*wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��)wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��({�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��'{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��&{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��%wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��$w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��#w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��"wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���!w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) � �g�s � � k � p � ] >�dz�J�{��[��p � �Q��^[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���]U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��\Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��[]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��ZQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��YQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��X[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���W[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��VU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��UK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��T]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��SS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��R]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���Q]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��P]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��OU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���NS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��MO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��LU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��KU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��JUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��IG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��HUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��GG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��FU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��EGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��DM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��CU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���BS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��AS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��@Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��?S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2 $ w �6�p. � � c � � k � O � l��1� �� �@��)`�17 � w e��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��~]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��}]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��|]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��{]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��zY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���y]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��x]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��w]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��v]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��u] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��t]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��s]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��r]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��q]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���p]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��o] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��n]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��m]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��lM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��k]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��j] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���i]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��h]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��g]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��f]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��e] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��d]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��cM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��beO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��aek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��`Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��_Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to "" � �h�8 � � � � � O � � � F�JPm�^��g)�n� � �4�� m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.��� [�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp�� mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C�� EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:�� E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P�� y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x�� y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F�� y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb�� yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"�� m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environment $ � �E�J � e � U ��w�v.��3��#��%���|E��4 � � Q��D_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��C_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��B_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��A_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��@_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��?K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��>_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��=_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��<_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��;_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��:_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��9]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��8]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��7]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��6]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��5]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��4]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��3]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��2]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��1]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��0_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��/E �Tim Powers <timp@redhat.com>>.��- rebuilt]��.__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��-c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��,_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��+_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��*]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��)MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��(]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��']�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��&m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��%E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��$E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��#m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��"e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��!m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code ) w �@�} � C � � ; � � N � � N � � )��<�O��3��1����(�<i � w x��mQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��lQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��kQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��jQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���iQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��hQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��gQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��fQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��e_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��d_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��c_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��bK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��a_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��`_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��__E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��^_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��]__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���\_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��[]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��ZK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��YeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��XGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��W]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��VK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��U]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��T]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��S]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��R]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��Q]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Pe/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��OcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Neq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��McE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Lc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��KcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��Jcy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Ico �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Hce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��G_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��F_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��E_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulled Z �{ � � � � ��'����a�� � Z z��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-�� q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��~qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��}qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��|q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���{k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��ze� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��yk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��xk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��wk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��vs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��us� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��t{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��s{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��r{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��qs�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���pQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��oQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��nQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix version � �% 7 � � �}�ku�r`�M � �?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q�� m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �� m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determined Y s � � � � ? � !2��A�� �� Y �"��'m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��&m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���%m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��$m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��#m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��"m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��!m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#�� k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]�� kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j�� k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph�� qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-�� k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket � �+ I � � 2 _�g�}�Y�F�X� � �2��;q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���:q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��9qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��8s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��7s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��6s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��5sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��4s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��3sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���2s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���1m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��0sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��/m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���.m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��-yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��,uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��+{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��*u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��)m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��(m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps � t� > � @ � 'z�A�5�e��b � �C��Oc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Nc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Mc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Lc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Kcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��Jco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Ic� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Hc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Gc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Fc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Ec� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Dc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Cc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Bqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Aq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���@q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��?}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��>q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��=q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���<q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root 7 � � � D � k���?f�d��N�? � 7 _��emU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��da�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��c_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��bcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��a_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��`c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��_c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���^_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��]c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��\_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��[_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��Z[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���Y[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��X[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��W[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��V[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��UcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Tcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Sc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Rc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���Qc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Pc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter � N�� � ` � R � � G�X�J����+�v�&l � � j�� gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��~c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��}g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���|g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��{g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��zgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��ygA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��xcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���wg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��vcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��ucQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��tc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���sg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��rc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���qg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��pg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��og�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��ng� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��mc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��lg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��kc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��jeu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��ia� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��heY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��gee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��fa�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support > mk � ` � 7 � k � Z � �Z�d�e�(� > �P��c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in��� c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+�� c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �� c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j�� cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��5i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��4em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��3eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���2i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��1e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��0e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���/i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��.ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��-iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��,e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��+e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��*e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��)ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��(eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��'e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��&e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��%i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��$e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��#am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��"]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��!aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[�� aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� �� a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z�� ]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��� e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef�� ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���Oa�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���N� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��M[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��L[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��K[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��J[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��Ig1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Hi�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Gi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Fe�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Eg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Dc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Cc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Ba�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Aak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��@ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���?�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��>e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��=sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��<aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��;aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��:[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��9gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��8ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��7k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��6g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���le�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��kc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��jc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��ia� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���ha�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��ga{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��fa5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��e_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��d_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��c[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��b[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��a[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���`i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��_i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��^i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���]i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��\i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��[e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��ZeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��Ye3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��Xe�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��We� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Ve� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��Ue3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Te�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���Se�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Ra�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��QgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Pe� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y�� aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l�� Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b�� [m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo�� g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b�� ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��~ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��}a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���|e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��{a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��za�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��ya} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��xa�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��wa5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��v[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��ug5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���te�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��se� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��raq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��qaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��pa� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��oa5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��n[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��mg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��+s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��*aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���)[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��([� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��'[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���&[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��%[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��$[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��#[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��"gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���!g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv�� g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L�� g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �� e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��Gae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Fa�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Em_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Dm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Cm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Bm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Ag� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��@gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��?g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��>i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��=cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���<i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��;a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��:aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��9g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��8a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��7g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���6[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��5[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��4[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���3[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��2c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��1g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���0g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��/gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��.g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��-a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��,�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���ag�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��`k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��_gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���^g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��]g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��\g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��[e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��Zgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��Yc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��Xcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��We? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��Va� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Ua� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��Ta�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Sa�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Ra�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��QaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Pa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Oai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Na�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Mg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Lgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Kg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Jg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Ig= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Hg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���}o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��|o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��{o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���zo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��yoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��xoK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��wo�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��vo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��uo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��tg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��sg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��rg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��qgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��pg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��og�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��ngW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��mg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��lg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��kg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��jgq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��ig3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��hg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��ggm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���fg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��eg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��dg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��cgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��bg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c�� uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)��� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses�� uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���~o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?��;}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���:{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��9{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��8{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���7{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���5{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��4wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��3wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��2{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��1{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��0{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��/wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��.w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��-w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��,wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���+w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��*w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���)}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��(s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��'ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��&wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��%w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��$wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��#wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��"so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��!w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R�� u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471��� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t�� uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) ! � a�Z � D � � � + � f � a ���T h�D���K� � n��\]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���[]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��Z]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��YU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���XS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��WO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��VU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��UU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��TUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��SG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��RUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��QG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��PU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��OGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��NM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��MU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���LS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��KS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��JOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��IS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��HS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��GGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��FG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��EGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���DG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��CG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��BO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��A]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��@� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���?q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���>}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��=}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���<}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) # q �B�s � } S � � h � �^�C��=�h�U�>�t� � q <��] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��~]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��}]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��|]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��{]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���z]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��y] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��x]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��w]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��vM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��u]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��t] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���s]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��r]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��q]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��p]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��o] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��n]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��mM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��leO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��kek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��jY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��iQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��h[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���gU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��fQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��e]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��dQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��cQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��b[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���a[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��`U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��_K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��^]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��]S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressed � �@�a � J � R X � K +��;�.c��*�X�� � �(�� m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J�� m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I�� QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente�� ]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S�� ]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script � �# y � c � � $ � S����_�^ �CA�i5 � � D��;]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��:_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��9E �Tim Powers <timp@redhat.com>>.��- rebuilt]��8__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��7c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��6_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��5_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��4]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��3MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��2]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��1]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��0m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��/E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��.E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��-m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��,e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��+m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��*m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���)[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��(mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��'EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��&E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��%m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��${# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��#yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��"yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��!y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.��� y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u�� y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel , � �S�m � � Y � � U � N � v � a��D�s�_ �A��I�c,��1�� � ]��g__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���f_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��e]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��dK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��ceI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��bGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��a]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��`K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��_]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��^]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��]]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��\]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��[]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Ze/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��YcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Xeq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��WcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Vc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��UcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��Tcy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Sco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Rce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��Q_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��P_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��O_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��N_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��M_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��L_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��K_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��J_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��IK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��H_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��G_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��F_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��E_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��D_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��C]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��B]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��A]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��@]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��?]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��>]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��=]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��<]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2 O �7�n7 � � @ � B � R � � (�� ��:�O �1��k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.�� s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��~{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��}{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��|{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��{s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���zQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��yQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��xQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��wQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��vQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��uQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��tQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���sQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��rQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��qQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��pQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��o_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��n_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��m_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��lK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��k_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��j_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��i_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��h_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root � � � t \ � : � c�3 Xj6 � x��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,�� u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%�� s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz�� s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-�� q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b�� qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs 4 � f � � h � � �u����A�# 4�j��(k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��'qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��&k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��%mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��$ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���#k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��"kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���!q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7�� S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� �� o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo��� m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m�� m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms B �w � � � P N'�Rp!�YB ���8m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��7yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��6uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��5{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��4u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��3m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��2m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��1m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��0m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���/m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��.m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��-m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��,m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��+m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��*k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��)kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � D � L � b � > � + � =�j�O�6� � n��Lqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Kq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Jq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��I}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��Hq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Gq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Fq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Eq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Dq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Cqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��Bs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��As�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��@s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��?sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��>s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��=sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���<s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���;m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��:sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��9m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. _ S�k � � � > g m;s t]'�]�� _ �z��b[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��a[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��`[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��_cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��^cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��]c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���\c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���[c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Zc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��Yc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Xc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Wc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Vc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Ucc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��Tco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Sc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Rc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Qc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Pc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Oc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Nc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Mc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � S z x � b�S�K�2�����" � � ��yg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��xg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��wc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��vg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��uc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��teu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��sa� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��reY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��qee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��pa�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��omU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��na�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��m_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��lcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��k_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��jc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��ic� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���h_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��gc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��f_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��e_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��d[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���c[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup ^ T� } � B � : � � / ��%�@��_��w�=� � ^ ���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH�� g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)��� g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j�� gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa�� cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��~c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���}g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��|c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���{g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��zg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � � < � F � � G e u� v� ���C�u�P � o��0e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��/i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��.e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��-am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��,]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��+aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��*aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��)a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��(]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���'e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��&ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��%ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��$e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��#c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��"g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���!c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W�� gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]�� c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`�� g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D�� g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO�� g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � ��' � � w � � W�`��h�s�T��q � � o��Mc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��La�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Kak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Jag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���I�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��He�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��GsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��FaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��EaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��D[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Cgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Bku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Ak� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��@g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��?i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��>em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��=eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���<i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��;e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��:e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���9i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��8ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��7iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��6e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��5e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��4e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��3ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��2eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��1e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) c ,� � j � 6 A ��p�K�~�9�����A � c � ��fi�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��ee3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��deM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��ce3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��be�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��ae� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��`e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��_e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��^e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���]e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��\a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��[gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Ze� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���Ya�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���X� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��W[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��V[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��U[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��T[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��Sg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Ri�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Qi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Pe�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Og�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Nc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set T t� � k x � D � � � q #��'�op�.�U��p � T v��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C�� [/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���~e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��}e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��|aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��{aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��za� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��ya5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��x[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��wg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���ve�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��uc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��tc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��sa� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���ra�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��qa{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��pa5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��o_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��n_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��m[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��l[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��k[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���ji� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��ii5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��hi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���gi�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) } v)�> � | � � l � = � w �.�t�Q�v� X�Q � } d��$[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��#[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��"[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��![�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?�� g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%�� g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+�� g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP�� aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��� a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO�� e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"�� e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp�� e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1�� c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript � �/�- � c � y g � � � ~!���� 9�I��!� � �h��Ba�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Ag? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���@[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��?[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��>[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���=[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��<c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��;g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���:g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��9gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��8g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��7a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��6�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��5s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��4aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���3[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��2[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��1[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���0[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��/[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��.[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��-[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��,gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���+g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��*g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��)g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��(eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��'e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��&eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��%ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch merged J G�w � � ] � � �����R�a�f���0 J �a��^a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���]a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��\a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��[aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Za� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Yai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Xa�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Wg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Vgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Ug� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Tg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Sg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Rg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��Qae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Pa�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Om_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Nm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Mm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Lm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Kg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��JgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Ig� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Hi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��GcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Fi�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Ea� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��DaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Cg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666) � D�m � J � � � -��%�� v �l��`� ]��xgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��wg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��vg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��ug3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��tgq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��sg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��rg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��qgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���pg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��og�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��ng� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��mgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��lg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���kg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��jk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��igI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���hg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��gg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��fg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��ee? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��dgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��cc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��bcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��ae? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��`a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��_a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o�� os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p�� ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a�� oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r�� oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.�� o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��~g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��}g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��|g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��{gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��zg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��yg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��4w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���3}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��2s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��1ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��0wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��/w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��.wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��-wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��,so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��+w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��*u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���)u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��(uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��'uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��&u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��%u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��$u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���#u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��"u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��!o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0�� o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S�� o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj�� oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr t y� � t � w x � ��~ p� ����9�W � t W��PGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���OG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��NG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��MO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��L]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>���K� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��J� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Iq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���H}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��G}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���F}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��E}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���D{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��C{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��B{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���A{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���@{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���?{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��>wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��=wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��<{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��;{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��:{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��9wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��8w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��7w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��6wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���5w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) ! � �;��7 � C � � � ; � @ � t -�{4�J�n�K�U+�� � �I��qQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��p]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��oQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��nQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��m[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���l[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��kU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��jK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��i]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��hS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��g]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���f]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��e]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��dU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���cS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��bO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��aU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��`U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��_Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��^G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��]UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��\G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��[U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��ZGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��YM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��XU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���WS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��VS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��UOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��TS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��SS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��RGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��QG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named. # � s� � i � � N � H � s `�I � �|1�x��+��� � �.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@�� ]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`�� ]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g�� ]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���~]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��}]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��|]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��{]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��z] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��y]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��xM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��weO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��vek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��uY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��tQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��s[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���rU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging � �F � � � ~ 8 � B � � A�Z�=��G� �D��o( � p��3mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��2EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��1E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��0m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��/{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��.yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��-yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��,y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���+y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��*y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��)y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��(m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��'m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��&m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��%e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��$y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��#yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��"y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��!y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F�� y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb�� yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"�� m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys ! t h/ � t � y ; � � :�� �E�]�b�R�T� � � t 3��TK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��S_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��R_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��Q_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��P_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��O_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��N]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��M]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��L]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��K]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��J]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��I]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��H]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��G]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��F]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��E_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��DE �Tim Powers <timp@redhat.com>>.��- rebuilt]��C__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��Bc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��A_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��@_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��?]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��>MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��=]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��<]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��;m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��:E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��9E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��8m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��7e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��6m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��5m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���4[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflags + � �_��J � � - � \ � � H � � * � � 2��L�s����$�}�{(�.�r � � a��Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���~Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��}Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��|QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��{Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��z_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��y_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��x_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��wK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��v_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��u_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��t_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��s_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��r__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���q_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��p]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��oK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��neI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��mGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��l]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��kK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��j]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��i]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��h]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��g]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��f]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��ee/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��dcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��ceq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��bcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��ac# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��`cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��_cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��^co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��]ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��\_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��[_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��Z_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��Y_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��X_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��W_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��V_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��U_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL � -�; � � 0 � � M�bS�� � g��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M�� k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1�� k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.�� s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~�� s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*�� {�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N�� Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back. Y �)w � � 0 ����v�dn�k Y � ��$m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��#m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���"m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��!m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� �� m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx�� k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`�� k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC libraries � A�) 7 � � � 5 � ; � h�J[��j��6 � ���:m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��9m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��8m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��7m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��6m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��5k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��4kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��3k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��2qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��1k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��0mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��/ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���.k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��-kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���,q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��+S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��*o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���)m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��(m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��'m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��&cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��%m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB . � � � �h �6�>�T�0� � ~��Ms� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��Ls�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��Ks� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��JsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��Is� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��HsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���Gs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���Fm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��Esk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��Dm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���Cm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��ByA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��AuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��@{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��?u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��>m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��=m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��<m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��;m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753) U �� � 5 � ��Z�;�S�k��&O U �u��bc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��ac�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��`cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��_co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��^c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���]c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��\c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��[c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Zc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Yc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Xc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Wqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Vq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Uq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��T}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��Sq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Rq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Qq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Pq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Oq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Nqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2) T � � � � J � q���El�j� � T k��v_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��uc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��tc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���s_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��rc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��q_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��p_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��o[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���n[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��m[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��l[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��k[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��jcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��icy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��hc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���gc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���fc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��ec �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��dc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��cc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now � ��L � 7 � o � I ~ ;}�0��A�3�r�j�_ � ���g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf�� cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)��� g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa�� cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X�� cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F�� c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��~a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��}eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��|ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��{a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��zmU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��ya�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��x_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��wcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systems M� � � d s � �X�\o�w `��)g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��(g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��'g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��&cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���%c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��$c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��#c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���"c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��!c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� �� c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j�� cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� �� g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch n �. � � / � ] � W � V��.� ��'�E� �5� n �:��Ee� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���Di� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��Cie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��Biq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��Ae} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��@e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��?e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��>ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��=eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��<e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��;e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��:i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��9e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��8am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��7]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��6aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��5aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��4a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��3]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���2e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��1ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��0ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��/e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��.c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��-g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���,c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��+gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��*c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch a �� � � � - � | & � 8�3�;��YP2L� a �#��`[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��_[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��^g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��]i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���\i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���[e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Zg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Yc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Xc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Wa�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Vak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Uag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���T�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Se�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��RsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��QaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��PaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��O[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Ngq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Mku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Lk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��Kg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��Ji[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��Iem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��HeG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���Gi�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��Fe� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD � 9�9 � ; � ; � @ � |�Q�Z�>���5B�b�Q � ���}a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��|a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��{a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��z_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��y_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��x[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��w[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��v[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���ui� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��ti5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��si] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���ri�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��qi�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��pe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��oeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��ne3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��me�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��le� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��ke� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��je3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��ie�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���he�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��ga�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��fgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��ee� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���da�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���c� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��b[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��a[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283) � �9� � = � � � ) � D � k $����j��+�Z�?�z� � � L�� g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[�� a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C�� [/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L�� g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��� e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]�� c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��~a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c) � �:�a � � 7 � � � 9 ��o�@�o�m ���L � z��:[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��9[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��8[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��7gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���6g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��5g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��4g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��3eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��2e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��1eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��0ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��/[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��.[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��-[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��,[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��+g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��*g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��)g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��(aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���'a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��&a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��%a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��$aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��#aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��"aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��!Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b�� [m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo�� g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b�� ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\�� gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkg n h�y � � x + o � X�q �>Q�B�?�f�Q�B n �O��Xm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Wm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Vg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��UgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Tg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Si� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��RcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Qi�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Pa� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��OaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Ng� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��Ma�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Lg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���K[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��J[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��I[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���H[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��Gc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��Fg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���Eg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��Dgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��Cg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��Ba5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��A�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��@s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��?aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���>[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��=[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��<[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���;[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478) � �� � y � � � 5 � D � I�z�-q��.�w#D � y��rg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��qg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��pe? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��ogi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��nc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��mcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��le? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��ka� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��ja� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��ia�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���ha�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��ga�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��faM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��ea� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��dai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���ca�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��bg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��ags �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��`g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��_g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��^g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���]g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��\ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��[a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Zm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Ym�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged � ��B : � Y f � p !�d�w�����5C� � � [�� oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� �� o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.�� o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m�� o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��~g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��}g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��|gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���{g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��zg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��yg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��xgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��wg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���vg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��uk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��tgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���sg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341) Y �l � j � g � � � + � H�w�S ��� g�u�]�A Y �c��-u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��,o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��+o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��*o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��)o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��(oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��'o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��&oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��%o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��$o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��#oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���"o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��!uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO�� o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c�� o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`�� oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi�� og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362) M i� � � � = � _ � z � � `�Z�]�-�<��Z�i � M ���L{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���K{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���J{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��IwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��Hwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��G{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��F{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��E{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��DwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��Cw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��Bw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��Awq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���@w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��?w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���>}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��=s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��<ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��;wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��:w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��9wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��8wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��7so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��6w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��5u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���4u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��3uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��2uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��1u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��0u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��/u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���.u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package H �} � � � � � b�|�|u�_"�� H �?��f}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���e{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��d{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��c{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���b{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�8��a�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��`s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���_s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���^}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��]}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���\}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��[}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���Z{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��Y{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��X{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���W{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���V� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��U� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Tq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���S}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��R}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���Q}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��P}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���O{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��N{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��M{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � a�Z � D � ! � � !���9�S��S�L � ���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���~}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���|}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��{}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���z{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��y{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��x{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakez��w�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��vs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��us�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ts� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���s}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��r}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���q}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��p}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���o{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��n{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��m{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��l�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��ks�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���js� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���i}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��h}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���g}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) J q$ � 5 � � 5 � . � �M%�S�@�&� J �H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � �Z � � � � i � � �$�8�%� |/ � z��+�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��*s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��)s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���(s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���'}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��&}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���%}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��$}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��#� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��"�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��!�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade � � � N � G � 1�f>{S� ��r� � �H��?s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��>s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���=s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���<}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��;}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���:}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�/��9��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��8� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��7�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��6�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��5�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��4s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��3s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���2s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���1}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��0}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���/}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��.� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��-�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��,�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file < �Z � o � G � - �Q���� Y�R�< � ��Ss�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Rs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���Q}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��P}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.��O��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��N��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��M� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��L�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��K�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��J�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Is� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Hs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Gs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���F}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��E}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��D��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��C� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��B�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��A�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��@�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade � �5 J " n � (��G \4�� � ���f}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�2��e�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��d��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��c��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��b� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��a�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��`�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��_�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��^s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��]s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���\s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���[}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��Z��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��Y��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��X� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��W�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��V�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��U�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ts� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � y� � � 4 X��g�� �"�F � �.��y��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��x��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��w� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��v�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��u�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��t�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ss� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��rs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���qs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��p�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��o��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��n��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��m� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��l�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��k�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��j�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��is� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��hs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���gs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) C I" � � A V.z��:�X�u �E � C e��S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W�� Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf�� G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W�� Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��� G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;�� G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"���'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2���'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��~s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��}s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���|s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�"��{�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��z�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates h u� � m � r � _ @ � f | �L�}��]��r� � h f��1ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��0Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��/Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��.[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���-U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��,Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��+]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��*Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��)Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��([W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���'[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��&U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��%K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��$]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��#S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��"]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���!]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C�� U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3��� S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?�� O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W�� U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbind # �b!��S � H � � � � � � e�S�St(�]�ek�^ G��T]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��SQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��R]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��Q]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��P]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��O]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��N]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��M]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��L]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��K]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��JY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���I]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��H]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��G]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��F]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��E] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��D]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��C]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��B]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��A]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���@]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��?] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��>]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��=]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��<M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��;]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��:] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���9]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��8]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��7]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��6]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��5] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��4]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��3M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��2eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall case z +��; � . c � � * � X �����[��E��zn5 � z P��re? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��qm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��pm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���o[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��nmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��mEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��lE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��km �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��j{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��iyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��hyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��gy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���fy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��ey! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��dy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��cm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��bm�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��am� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��`e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��_y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��^yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��]y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��\y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��[y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��ZyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��Ym�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��Xy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��Wm �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��VoC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��Um�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393) $ � C�| � s � � 2��1��<��V��B��>�7 �_��J � � L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^�� _a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL�� ]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h�� _u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��E �Tim Powers <timp@redhat.com>>.��- rebuilt]��~__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��}c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��|_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��{_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��z]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��yMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��x]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��w]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��vm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��uE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��tE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��sm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver. ( � �=�b � h � � T � ` � � E � � Y�p�F�}F��O�Q�a�)�7 � ^��>Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��=Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��<Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��;Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��:Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���9Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��8Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��7QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��6Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��5_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��4_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��3_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��2K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��1_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��0_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��/_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��._� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��-__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���,_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��+]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��*K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��)eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��(Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��']+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��&K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��%]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��$]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��#]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��"]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��!]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H�� e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW�� cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi�� eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR�� cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA�� c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only" � �F W � # t � ?�7z��.�R�: � z��Qs� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Pq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��OqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��Nqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��Mqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��Lq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���Kk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��Je� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��Ik� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��Hk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��Gk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��Fs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��Es� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��D{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��C{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��B{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��As�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���@Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��?Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data � �% 7 � � �}�ku�r`�M � �?��bm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��acA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��`m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��_m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��^m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���]m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��\m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��[m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��Zm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���Ym� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��Xk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��Wk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��Vk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��Us) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��Tk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��Su�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��Rs�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determined Y s � � � � ? � !2��A�� �� Y �"��wm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��vm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���um�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��tm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��sm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��rm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��qm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��pk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��okS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��nk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��mqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��lk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��kmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��jok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���ik�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��hkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���gq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��fS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��eo�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���dm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��cm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket � �+ I � � 2 _�g�}�Y�F�X� � �2�� q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��� q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h�� qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m�� sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���~m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��}yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��|uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��{{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��zu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��ym� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��xm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps � t� > � @ � 'z�A�5�e��b � �C�� c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-�� c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u�� c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R�� c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� �� q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��� q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root 7 � � � D � k���?f�d��N�? � 7 _��5mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��4a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��3_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��2cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��1_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��0c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��/c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���._�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��-c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��,_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��+_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��*[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���)[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��([� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��'[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��&[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��%cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��$cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��#c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���"c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���!c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o�� c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter � N�� � ` � R � � G�X�J����+�v�&l � � j��Pgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Oc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��Nc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��Mg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���Lg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��Kg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��JgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��IgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��Hcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���Gg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��Fcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��EcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��Dc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���Cg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��Bc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���Ag�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��@g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��?g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��>g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��=c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��<g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��;c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��:eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��9a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��8eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��7ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��6a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support > mk � ` � 7 � k � Z � �Z�d�e�(� > �P��ic�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��hg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���gc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��fgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��ec�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��dg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��cg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��bg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��acS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���`c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��_c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��^c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���]c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��\c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��[c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��Zcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��Yce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��Xce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��Wg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���Vg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��UcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��T�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��Sg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��Rg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���Qg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:�� e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��~ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��}iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��|e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��{e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��ze� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��yek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��xeq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��we� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��ve} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��ui� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��te�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��sam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��r]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��qaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��paY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��oa�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��n]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���me�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��lek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��kic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��je�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ��� a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)��� � � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^�� [e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B�� [�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)����!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX�� sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR�� aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW�� aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R�� [M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej�� gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���<e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��;c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��:c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��9a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���8a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��7a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��6a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��5_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��4_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��3[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��2[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��1[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���0i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��/i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��.i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���-i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��,i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��+e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��*eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��)e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��(e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��'e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��&e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��%e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��$e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���#e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��"a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��!gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls�� e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��]aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��\Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��Zg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��Yga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��XgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��Wg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��V[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��U�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��Tgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��Se= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��Re�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��Qe �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Pe3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Oc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��Nak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��Ma5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���Le�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��Ka� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��Ja�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��Ia} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��Ha�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��Ga5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��F[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��Eg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���De�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��Ce� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��Baq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��AaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��@a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��?a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��>[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��=g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��{s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��zaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���y[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��x[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��w[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���v[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��u[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��t[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��s[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��rgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���qg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��pg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��og5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��neW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��me�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��leW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��key �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��j[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��i[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��h[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��g[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��fg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��eg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��dg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��caC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���ba�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��aa� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��`a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��_aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��^aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\�� cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��� i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v�� a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR�� aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings��� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��~g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��}a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��|�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���1g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��0k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��/gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���.g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��-g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��,g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��+e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��*gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��)c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��(cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��'e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��&a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��%a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��$a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���#a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��"a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��!aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c�� ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)��� a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk�� gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���Mo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��Lo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��Ko�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���Jo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��IoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��HoK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��Go�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��Fo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��Eo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��Dg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��Cg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��Bg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��AgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��@g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��?g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��>gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��=g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��<g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��;g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��:gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��9g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��8g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��7gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���6g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��5g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��4g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��3gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��2g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��muU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��lu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��ku� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��ju[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���iu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��hu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��go[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��fo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��eo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��do; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��coi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��bo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��aoo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��`o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��_o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��^oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���]o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��\uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��[o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��Zo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��Yo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��XoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��Wog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��Voa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��Uo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��To� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��Sos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��Rou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��QoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Poo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Ooy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���No�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �� {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��~w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��}w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��|wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���{w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��zw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���y}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��xs�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��wws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��vwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��uw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��twm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��swg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��rso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��qw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��pu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���ou� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��nuw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) ! � a�Z � D � � � + � f � a ���T h�D���K� � n��,]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���+]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��*]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��)U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���(S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��'O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��&U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��%U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��$Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��#G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��"UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��!G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E�� U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ�� Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a�� M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w�� U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs��� S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) # q �B�s � } S � � h � �^�C��=�h�U�>�t� � q <��O] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��N]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��M]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��L]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��K]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���J]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��I] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��H]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��G]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��FM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��E]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��D] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���C]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��B]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��A]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��@]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��?] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��>]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��=M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��<eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��;ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��:Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��9Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��8[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���7U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��6Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��5]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��4Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��3Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��2[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���1[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��0U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��/K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��.]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��-S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressed � �@�a � J � R X � K +��;�.c��*�X�� � �(��mm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��lm�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��km� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��je? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��iy �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��hyU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��gy+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��fy{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��ey� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��dyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��cm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��by! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��am �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��`oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��_m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��^]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��]QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��\]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��[]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��Z]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��Y]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��X]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��W]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��V]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��U]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��TY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���S]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��R]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��Q]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��P]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script � �# y � c � � $ � S����_�^ �CA�i5 � � D�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h�� _u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0�� E �Tim Powers <timp@redhat.com>>.��- rebuilt]��__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G�� m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��~E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��}m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��|e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��{m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��zm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���y[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��xmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��wEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��vE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��um �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��t{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��syC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��ryM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��qy�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���py�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��oy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��ny�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel , � �S�m � � Y � � U � N � v � a��D�s�_ �A��I�c,��1�� � ]��7__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���6_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��5]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��4K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��3eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��2Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��1]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��0K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��/]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��.]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��-]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��,]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��+]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��*e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��)cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��(eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��'cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��&c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��%cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��$cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��#co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��"ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��!_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L�� _= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl�� _} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ�� _G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L�� _= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl�� _} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita�� ]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2 O �7�n7 � � @ � B � R � � (�� ��:�O �1��Qk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��Ps�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��Os� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��N{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��M{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��L{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��Ks�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���JQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��IQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��HQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��GQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��FQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��EQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��DQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���CQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��BQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��AQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��@Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��?_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��>_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��=_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��<K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��;_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��:_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��9_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��8_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root � � � t \ � : � c�3 Xj6 � x��bk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��ak�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��`k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��_s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��^k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��]u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��\s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��[s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��Zq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��YqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��Xqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��Wqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��Vq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���Uk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��Te� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��Sk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��Rk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs 4 � f � � h � � �u����A�# 4�j��xk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��wqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��vk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��umW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��tok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���sk�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��rkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���qq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��pS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��oo�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���nm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��mm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��lm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��kcA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��jm� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��im�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��hm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���gm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��fm�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��em� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��dm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���cm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms B �w � � � P N'�Rp!�YB ���m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��~m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��}m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��|m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��{m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��zk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��ykS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � D � L � b � > � + � =�j�O�6� � n�� qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[�� sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config��� s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m�� sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. _ S�k � � � > g m;s t]'�]�� _ �z��2[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��1[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��0[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��/cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��.cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��-c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���,c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���+c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��*c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��)c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��(c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��'c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��&c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��%cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��$co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��#c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���"c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��!c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version�� c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr�� c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn�� c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(�� c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � S z x � b�S�K�2�����" � � ��Ig�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��Hg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��Gc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��Fg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��Ec�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��Deu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��Ca� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��BeY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��Aee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��@a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��?mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��>a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��=_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��<cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��;_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��:c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��9c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���8_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��7c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��6_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��5_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��4[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���3[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup ^ T� } � B � : � � / ��%�@��_��w�=� � ^ ���gc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��fc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��ec�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��dcu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��cce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��bce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��ag�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���`g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��_cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��^�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��]g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��\g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���[g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��Zgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��Yc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��Xc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��Wg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���Vg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��Ug? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��TgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��SgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��Rcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���Qg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��Pcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��OcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��Nc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���Mg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��Lc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���Kg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��Jg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � � < � F � � G e u� v� ���C�u�P � o�� e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��~e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��}am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��|]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��{aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��zaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��ya�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��x]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���we�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��vek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��uic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��te�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��sc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��rg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���qc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��pgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��oc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��ng] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��mg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��lg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��kcS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���jc�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��ic�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��hc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � ��' � � w � � W�`��h�s�T��q � � o�� c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� �� a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)����!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT�� eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch��� i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}�� e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:�� e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��� i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) c ,� � j � 6 A ��p�K�~�9�����A � c � ��6i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��5e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��4eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��3e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��2e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��1e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��0e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��/e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��.e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���-e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��,a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��+gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��*e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���)a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���(� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��'[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��&[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��%[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��$[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��#g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��"i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���!i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)��� e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param��� g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O�� c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set T t� � k x � D � � � q #��'�op�.�U��p � T v��Ua� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��Ta�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��Sa} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��Ra�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��Qa5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��P[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��Og5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���Ne�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��Me� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��Laq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��KaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��Ja� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��Ia5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��H[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��Gg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���Fe�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��Ec[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��Dc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��Ca� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���Ba�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��Aa{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��@a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��?_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��>_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��=[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��<[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��;[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���:i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��9i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��8i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���7i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) } v)�> � | � � l � = � w �.�t�Q�v� X�Q � } d��t[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��s[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��r[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��q[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��pg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��og�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��ng�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��maC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���la�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��ka� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��ja= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��iaW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��haU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��gaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��fY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��e[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��dg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��cga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��bgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��ag5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��`[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��_�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��^gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��]e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��\e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��[e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��Ze3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��Yc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��Xak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��Wa5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���Ve�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript � �/�- � c � y g � � � ~!���� 9�I��!� � �h��a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h��� [�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO�� c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O�� g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings��� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f�� gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ���%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��� [�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��~[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��}[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��|gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���{g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��zg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��yg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��xeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��we�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��veW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��uey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch merged J G�w � � ] � � �����R�a�f���0 J �a��.a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���-a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��,a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��+aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��*a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��)ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���(a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��'g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��&gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��%g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��$g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��#g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���"g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��!ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� �� a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d�� m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)��� m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O�� m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� �� m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666) � D�m � J � � � -��%�� v �l��`� ]��HgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��Gg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��Fg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��Eg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��Dgq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��Cg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��Bg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��Agm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���@g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��?g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��>g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��=gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��<g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���;g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��:k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��9gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���8g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��7g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��6g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��5e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��4gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��3c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��2cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��1e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��0a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��/a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��eo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��do[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��co� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��boU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��aog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��`oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��_o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��^o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��]os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��\ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��[oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��Zoo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��Yoy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���Xo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���Wo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��Vo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��Uo�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���To� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��SoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��RoK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��Qo�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��Po�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��Oo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��Ng3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��Mg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��Lg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��KgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��Jg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��Ig�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n�� wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��~wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��}wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��|so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��{w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��zu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���yu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��xuw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��wuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��vu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��uu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��tu[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���su�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��ru�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��qo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��po�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��oo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��no; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��moi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��lo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��koo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��jo�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��io� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��hoi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���go� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��fuu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr L y� � t � w x � ��~ p� ���A�_�| � L g��"S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��!Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf�� G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W�� Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.��� G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;�� G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� �� O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �� {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) � �g�s � � k � p � ] >�dz�J�{��[��p � �Q��B[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���AU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��@Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��?]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��>Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��=Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��<[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���;[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��:U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��9K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��8]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��7S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��6]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���5]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��4]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��3U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���2S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��1O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��0U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��/U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��.Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��-G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��,UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��+G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��*U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��)Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��(M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��'U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���&S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��%S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��$Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��#S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2 $ w �6�p. � � c � � k � O � l��1� �� �@��)`�17 � w e��f]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��e]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��d]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��c]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��b]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��a]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��`]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��_]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��^Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��\]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��[]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��Z]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��Y] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��X]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��W]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��V]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��U]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���T]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��S] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��R]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��Q]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��PM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��O]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��N] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���M]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��L]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��K]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��J]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��I] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��H]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��GM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��FeO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��Eek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��DY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��CQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to "" � �h�8 � � � � � O � � � F�JPm�^��g)�n� � �4��m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:�� E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��~{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��}yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��|yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��{y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���zy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��yy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��xy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��wm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��vm�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��um� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��te? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��sy �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��ryU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��qy+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��py{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��oy� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��nyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��mm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��ly! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��km �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��joC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��im�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��h]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��gQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environment $ � �E�J � e � U ��w�v.��3��#��%���|E��4 � � Q��(_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��'_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��&_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��%_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��$_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��#K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��"_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��!_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM�� _? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^�� _a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL�� ]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH�� ]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��E �Tim Powers <timp@redhat.com>>.��- rebuilt]��__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO�� MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V�� ]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W�� ]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G�� m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:�� E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code ) w �@�} � C � � ; � � N � � N � � )��<�O��3��1����(�<i � w x��QQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��PQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��OQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��NQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���MQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��LQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��KQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��JQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��I_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��H_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��G_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��FK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��E_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��D_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��C_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��B_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��A__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���@_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��?]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��>K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��=eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��<Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��;]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��:K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��9]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��8]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��7]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��6]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��5]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��4e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��3cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��2eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��1cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��0c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��/cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��.cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��-co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��,ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��+_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��*_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��)_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulled Z �{ � � � � ��'����a�� � Z z��es� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��dq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��cqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��bqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��aqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��`q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���_k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��^e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��]k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��\k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��[k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��Zs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��Ys� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��X{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��W{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��V{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��Us�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���TQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��SQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��RQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix version � �% 7 � � �}�ku�r`�M � �?��vm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��ucA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��tm� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��sm�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��rm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���qm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��pm�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��om� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��nm�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���mm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��lk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��kk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��jk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��is) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��hk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��gu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��fs�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedx�� � Z S L E > 7 0 ) " � � � � � � � � � � � � � � � � � � � z s l e ^ W P I B ; 4 - & � � � � � �qjc\UNG@92+$ � � � � � � � � � � � � � � � � � � | u n g ` Y R K D = 6 / ( ! � � � � � � � � � � � � � � ~ w p i b [ T M F ? 8 1 * # ������������������{tmf_XQJC<5.' ������������������xqjc\UNG@92+$ ������������������|ung`YRKD=6/(! �������������������yrkd]VOHA:3,% ������������������}vohaZSLE>70)" ��������������� � � � � � � � � � � � � � � � � y r k d ] V O H A : 3 , % � � � � � � � � � � � � � � � � � � } v o h a �������������������{tmf_XQJC<5.' ������������������x ���@ ���" ��� ���e ���L ���1 ��� ���t ���S ���8 ��� ��� ���g ���M ���9 ���# ��� ���| ���k ���T ���( ��� ���j ���G ���& ��� ��� ���l ���S ���8 ��� ���| ���b ���F ���( ��� ���j ���Q ���4 ��� ���} ���f ���P ���< ���, ��� ��� ���k ���? ���! ��� ���` ���? ���! ��� ���e ���K ���/ ��� ���p ���S ���9 ��� �� ~��j }��U |��A {��- z�� y�� x��t w��N v��* u�� t��i s��G r��/ q�� p�� o��p n��V m��8 l�� k��} j��c i��D h��& g�� f��j e��P d��2 c�� b�� a��k `��U _��D ^��- ]�� \�� [��[ Z��9 Y�� X��y W��W V��; U�� T��| S��c R��G Q��+ P�� O��l N��T M��6 L�� K�� J��l I��U H��A G��2 F�� E�� D��k C��A B��% A�� @��b ?��F >��3 <�� ;�� :��o 9��Q 8��1 7�� 6��{ 5��_ 4��A 3�� 2�� 1��i 0��M /��4 .�� -�� ,��o +��[ *��F )��5 (��! '��x &��T %��6 $�� #��r "��T !��5 �� ��~ ��b ��D ��% �� ��m ��P ��7 �� �� ��l ��X ��H ��2 ��! �� ��Y ��< �� ��{ ��\ ��J ��7 ��# �� ��{ ��e ��M ��4 �� ��z ��] ���B ���& ��� ���h ���I ���0 ��� ���z ���\ ���F ���/ �� �� ��v ��e ��H �� �� ��a ��? �� �� ��a ��E ��+ �� ��q ��P ��3 �� ��} ��d ߁�I ށ�3 ݁� ܁� ځ�v ���N ���S ���? ���+ ��� ��� ���f ���L ���- ��� ���r ���X ���: ��� ���} ���` ���E ���) ��� ���v ���b ���M ���: ���$ ��� ��� ���T ���3 ��� ���q ���P ���4 ��� ���x ���^ ��B ~��$ }�� |��f {��M z��0 y�� x��y w��b v��L u��8 t��( s�� r�� q��g p��; o�� n�� m��\ l��; k�� j��} ���0 ��� ��� �i �R �1 � �y a G 킊 삊 낉s ꂉ\ 邉H 肉. 炉 悈q 傈Q 䂈8 よ ₈ ႇq �W ߂�; ނ� ݂� ܂�i ۂ�O ڂ�) ق� �z ׂ�f ւ�P Ղ�6 Ԃ� ӂ�x ҂�\ т�B Ђ�& ς� �g ͂�J ̂�0 ˂� ʂ�| ɂ�a Ȃ�L ǂ�8 Ƃ�$ ł� Ă�~ Â�k �E ���! ��� ���c ف�e �Q ׁ�( ց� Ձ�f ԁ�B Ӂ�" ҁ� с�e Ё�H ρ�. � ́�t ́�U ˁ�6 ʁ� Ɂ� ȁ�g ǁ�I Ɓ�2 Ł� ā� Á�x �b ���Q ���7 ��� ���m ���O ���, ��� ���m ���M ���1 ��� ���{ ���] ���< ��� ��� ���i ���P ���5 ��� ��� ���w ���b ���Q ���> ��� ���r ���T ���1 ��� ���y ���f � Y s � � � � ? � !2��A�� �� Y �"�� m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��� m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-�� k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��~ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���}k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��|kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���{q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��zS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��yo�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���xm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��wm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket � �+ I � � 2 _�g�}�Y�F�X� � �2�� q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.��� q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h�� qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~�� s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy�� m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT�� m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps � t� > � @ � 'z�A�5�e��b � �C��3c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��2c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��1c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��0c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��/cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��.co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��-c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���,c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��+c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��*c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��)c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��(c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��'c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��&qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��%q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���$q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��#}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��"q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��!q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64��� q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root 7 � � � D � k���?f�d��N�? � 7 _��ImU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��Ha�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��G_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��Fcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��E_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��Dc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��Cc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���B_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��Ac� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��@_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��?_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��>[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���=[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��<[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��;[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��:[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��9cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��8cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��7c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���6c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���5c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��4c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter � N�� � ` � R � � G�X�J����+�v�&l � � j��dgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��cc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��bc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��ag�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���`g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��_g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��^gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��]gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��\cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���[g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��Zcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��YcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��Xc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���Wg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��Vc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���Ug�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��Tg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��Sg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��Rg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��Qc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��Pg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��Oc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��Neu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��Ma� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��LeY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��Kee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��Ja�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support > mk � ` � 7 � k � Z � �Z�d�e�(� > �P��}c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��|g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���{c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��zgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��yc�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��xg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��wg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��vg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��ucS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���tc�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��sc�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��rc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���qc�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��pc�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��oc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��ncu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��mce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��lce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��kg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���jg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��icE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��h�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��gg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��fg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���eg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f�� ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i�� eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}�� e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o�� e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)�� i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef�� ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��~e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���3a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���2� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��1[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��0[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��/[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��.[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��-g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��,i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���+i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���*e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���)g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��(c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��'c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��&a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��%ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��$ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���#�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��"e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��!sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR�� aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW�� aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R�� [M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej�� gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn�� ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���Pe�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��Oc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��Nc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��Ma� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���La�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��Ka{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��Ja5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��I_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��H_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��G[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��F[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��E[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���Di� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��Ci5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��Bi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���Ai�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��@i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��?e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��>eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��=e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��<e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��;e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��:e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��9e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��8e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���7e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��6a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��5gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��4e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��qaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��pY� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��o[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��ng{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��mga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��lgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��kg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��j[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��i�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��hgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��ge= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��fe�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��ee �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��de3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��cc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��bak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��aa5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���`e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��_a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��^a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��]a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��\a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��[a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��Z[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��Yg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���Xe�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��We� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��Vaq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��UaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��Ta� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��Sa5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��R[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��Qg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)��� [�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it��� [�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��~[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��}[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��|[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��{[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��zg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��yg�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��xg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��waC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���va�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��ua� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��ta= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��saW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��raU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��+ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��*a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��)m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���(m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��'m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��&m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��%g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��$gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��#g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��"i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��!cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid��� i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v�� a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR�� aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h�� a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ���%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���Eg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��Dk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��CgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���Bg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��Ag� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��@g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��?e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��>gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��=c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��<cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��;e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��:a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��9a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��8a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���7a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��6a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��5aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��4a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��3ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���2a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��1g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��0gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��/g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��.g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��-g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���,g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���ao� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��`o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��_o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���^o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��]oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��\oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��[o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��Zo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��Yo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��Xg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��Wg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��Vg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��UgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��Tg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��Sg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��RgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��Qg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��Pg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��Og3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��Ngq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��Mg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��Lg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��Kgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���Jg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��Ig�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��Hg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��Ggk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��Fg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��~u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���}u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��|u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��{o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��zo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��yo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��xo; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��woi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��vo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��uoo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��to�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��so� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��roi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���qo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��puu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��oo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��no[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��mo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��loU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��kog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��joa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��io �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��ho� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��gos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��fou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��eoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��doo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��coy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���bo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?�� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�� {k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��� }� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+�� s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys�� ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n�� wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}�� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) � a�Z � D < � � � # � ^ �Y�� ��L`�<���C � � G��?]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��>U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���=S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��<O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��;U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��:U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��9Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��8G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��7UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��6G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��5U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��4Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��3M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��2U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���1S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��0S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��/Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��.S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��-S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��,Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��+G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��*Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���)G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��(G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��'O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��&]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>���%� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��$� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���#q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���"}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��!}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) " � a��1 � b � l B � � � W��M��n2��,�W�D�-�c � M��a]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��`]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���_]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��^] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��\]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��[M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��Z]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��Y] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���X]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��W]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��V]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��U]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��T] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��S]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��RM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��QeO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��Pek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��OY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��NQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��M[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���LU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��KQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��J]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��IQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��HQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��G[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���F[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��EU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��DK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��C]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��BS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��A]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���@]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bind � R��c � � � ] � / � �F���~8�B��A�Z� v�� m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��~y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��}yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��|y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��{y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��zy� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��yyO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��xm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��wy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��vm �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��uoC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��tm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��s]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��rQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��q]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��p]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��o]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��n]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��m]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��l]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��k]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��j]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��iY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���h]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��g]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��f]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��e]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��d] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��c]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��b]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bind E � � ' } � g ! � � (�W����c�b�G E �}��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp�� mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C�� EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:�� E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M�� {# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484) - q �(��@ � � E � � 5 � � 7 � � � � W �F��1�� �C��I��5��A��l& � q U��HeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��GGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��F]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��EK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��D]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��C]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��B]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��A]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��@]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��?e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��>cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��=eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��<cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��;c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��:cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��9cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��8co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��7ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��6_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��5_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��4_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��3_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��2_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��1_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��0_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��/_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��.K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��-_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��,_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��+_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��*_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��)_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��(]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��']7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��&]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��%]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��$]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��#]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��"]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��!]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D�� ]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h�� _u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0�� E �Tim Powers <timp@redhat.com>>.��- rebuilt]�� __ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files�� c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time. � �l� � c � � a � � X � l�#�E"��1h�7 � �.��es�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��ds� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��c{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��b{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��a{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��`s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���_Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��^Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��]Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��\Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��[Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��ZQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��YQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���XQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��WQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��VQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��UQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��T_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��S_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��R_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��QK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��P_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��O_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��N_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��M_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��L__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���K_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��J]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��IK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt � J � ; � � � � ��}S��de � �`��vk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��uk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��ts) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��sk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��ru�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��qs�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��ps� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��oq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��nqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��mqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��lqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��kq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���jk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��ie� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��hk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��gk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��fk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change. � � z � h r � o ]�J���T�2�)�� h�� qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-�� k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`�� mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk�� ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP�� cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��~m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��}m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���|m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��{m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��zm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��ym�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���xm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��wk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum) j � � � ��a_8�c�2 � j [�� yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j�� k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanup � � - � 5 � K � ' � �&�S�8� � ���/q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��.}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��-q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��,q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���+q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��*q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���)q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��(qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��'s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��&s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��%s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��$sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��#s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��"sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���!s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver��� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m�� sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��� m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel � Y�: � R � j � � % NT"Z�[D�Dp � �&��F[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��E[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��DcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Ccy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Bc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Ac�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���@c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��?c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��>c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��=c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��<c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��;c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��:cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��9co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��8c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���7c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��6c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��5c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��4c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��3c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��2c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��1qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��0q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>. ` � u ( � � � � �R�|�/��R�,a ` �9��\c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��[g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��Zc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��Yeu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��Xa� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��WeY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��Vee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��Ua�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��TmU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��Sa�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��R_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��Qcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��P_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��Oc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��Nc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���M_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��Lc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��K_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��J_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��I[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���H[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��G[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist M C� q � 0 � Z � W � � 7�E��a�`^�S�*�^ � M � ��zc�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��ycu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��xce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��wce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��vg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���ug�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��tcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��s�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��rg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��qg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���pg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��ogq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��nc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��mc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��lg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���kg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��jg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��igU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��hgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��gcm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���fg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��ecc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��dcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��cc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���bg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��ac�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���`g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��_g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��^g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��]g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com) � P� T g � o )�9��:�h�b�a�9 � � ��e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z�� ]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces��� e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef�� ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d�� ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%�� e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY�� cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��~c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��}c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���|c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��{c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122 � } � 1 � � � � !�a�j��r�}�^�{ � d��0ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��/ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���.�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��-e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��,sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��+aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��*aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��)[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��(gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��'ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��&k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��%g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��$i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��#em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��"eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���!i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}�� e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:�� e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��� i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e�� ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk�� iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118) > p�) � � g � 3 >��m�H�{�6��� � � > W��IeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��He3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��Ge�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��Fe� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Ee� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��De3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Ce�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���Be�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Aa�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��@gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��?e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���>a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���=� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��<[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��;[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��:[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��9[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��8g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��7i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���6i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���5e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���4g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��3c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��2c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��1a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-conf � �"�1 � � � � = � f � �E��I���5�P�w0� � m��ha} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��ga�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��fa5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��e[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��dg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���ce�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��be� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��aaq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��`aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��_a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��^a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��][w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��\g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���[e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��Zc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��Yc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��Xa� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���Wa�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��Va{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��Ua5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��T_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��S_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��R[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��Q[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��P[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���Oi� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��Ni5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��Mi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���Li�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��Ki�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��Je3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3 � ^�Z � " � ` � f � P q !�[���X��5�Z� < � �'��[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p�� a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��~aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��}aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��|aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��{Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��z[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��yg{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��xga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��wgU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��vg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��u[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��t�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��sgy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��re= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��qe�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��pe �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��oe3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��nc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��mak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��la5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���ke�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��ja� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��ia�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg) � �9�` ^ � � 4 � J 8 � _�V�O�x���d� ��} � � Q��&g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���%[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��$[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��#[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���"[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��!c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O�� g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings��� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f�� gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI�� a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ���%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� �� e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm�� ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd�� [q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256) C Z � � ( p � 0����e�t�y� � C ���Ba�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Aa�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��@aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��?a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��>ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���=a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��<g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��;gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��:g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��9g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��8g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���7g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��6ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��5a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��4m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���3m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��2m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��1m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��0g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��/gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��.g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��-i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��,cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���+i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��*a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��)aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��(g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��'a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpage � ^ � � � d 1 ��G��?� �$���z+ � ]��]gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��\g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��[g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��Zg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��Ygq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��Xg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��Wg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��Vgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���Ug�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��Tg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��Sg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��Rgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��Qg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���Pg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��Ok3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��NgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���Mg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��Lg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��Kg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��Je? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��Igi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��Hc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��Gcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��Fe? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��Ea� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Da� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��Ca�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��zo3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��yo[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��xo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��woU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��vog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��uoa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��to �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��so� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��ros �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��qou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��poW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��ooo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��noy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���mo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���lo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��ko� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��jo�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���io� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��hoW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��goK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��fo�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��eo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��do�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��cg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��bg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��ag�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��`gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��_g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��^g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t�� uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c�� uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f�� u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��~o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��}oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���|o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��{uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr � y� � t � w x � ��~ p� ����U�o � ���4{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��3{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��2{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���1{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���0� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��/� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���.q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���-}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��,}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���+}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��*}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���){�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��({c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��'{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���&{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���%{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���${� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��#wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��"wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��!{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �� {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) � <�) � � C � ; � -i�V�<�p���)� � ���M}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��L}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���K}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��J}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���I{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��H{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��G{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��F�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��Es�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ds� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���C}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��B}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���A}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��@}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���?{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��>{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��={k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���<{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�8��;�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��:s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���9s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���8}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��7}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���6}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��5}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) v y� � � 9 � � 9 � 2� �Q�C�l�R� v �H��es� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ds�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���cs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���b}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��a}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���`}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��_}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���^{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��]{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��\�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��[s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Zs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ys� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���X}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��W}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���V}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��U}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���T{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��S{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��R{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistakez��Q�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ps� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Os�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ns� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) f �Z � L � � u � [ ��vo�Y � f �#��{�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��z�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ys� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��xs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ws� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���v}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��u}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���t}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��s}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��r�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��q�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ps� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��os�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ns� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���m}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��l}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���k}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��j}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���i{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��h{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)�#��g�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��f�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade 0 = Q � > � $ � H��������0 z���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��~}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��}� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��|�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 � � � 9 � & � }0�����w�]� � �H��#s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��"s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���!s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/�� ��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#�� � �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file � �Z � o � � z�� �5 Y�� � � ��7s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���6s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���5}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��4��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��3��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��2� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��1�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��0�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��/�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��.s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��-s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���,s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���+}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��*}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�.��)��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��(��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��'� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��&�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��%�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��$�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade _ �5 J " n � q�[�h�}� _ �2��J�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��I��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��H��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��G� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��F�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��E�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��D�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Cs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Bs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���As� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���@}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�2��?�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��>��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��=��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��<� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��;�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��:�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��9�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��8s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � y� � � 4 X���@�d��� � �#��\� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��[�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��Z�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��Y�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Xs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Ws�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Vs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�"��U�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��T�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��S��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��R��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��Q� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��P�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��O�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��N�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Ms� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Ls�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ks� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) � L� � � i * � G � � �~�)���� �tU�{0 � ���{]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��z]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��yU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���xS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��wO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��vU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��uU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��tUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��sG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��rUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��qG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��pU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��oGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��nM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��mU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���lS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��kS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��jOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��iS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��hS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��gGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��fG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��eGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���dG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��cG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��bO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��a]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��`�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��_�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��^��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��]��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11 " � �$�] f � � Q � � �V��N ��?�4���o���Q � �)�� ]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM�� ]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>�� M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX�� eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef�� ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF�� Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|�� Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX�� U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��~]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��}S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��|]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063) � �\�X � q � � a � � ]��\�,�����C���: � �J��<m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��;m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��:e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��9y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��8yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��7y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��6y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��5y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��4yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��3m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��2y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��1m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��0oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��/m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��.]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��-QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��,]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��+]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��*]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��)]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��(]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��']�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��&]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��%]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��$Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���#]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��"]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��!]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`�� ]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503) � SY v � g � p 2 � w ��?�.��g �^��� � � 0��YE �Tim Powers <timp@redhat.com>>.��- rebuilt]��X__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��Wc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��V_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��U_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��T]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��SMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��R]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��Q]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��Pm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��OE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��NE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��Mm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��Le? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��Km] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��Jm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���I[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��Hmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��GEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��FE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��Em �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��D{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��CyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��ByM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Ay�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���@y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��?y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��>y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��=m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009) , � �L�Q � A � � C � � � � c � R �=��*�O��U��A��M��x2�}F � Y��]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3�� K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��~]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��}]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��|]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��{]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��ze/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��ycO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��xeq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��wcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��vc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��ucW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��tcy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��sco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��rce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��q_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��p_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��o_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��n_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��m_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��l_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��k_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��j_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��iK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��h_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��g_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��f_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��e_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��d_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��c]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��b]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��a]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��`]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��_]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��^]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��]]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��\]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��[]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��Z_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes b t�J � � J � � S � U � e -�;�� 0��M� b �1��!k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.�� s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~�� s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*�� {�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D�� {� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg�� {W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ�� _G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3�� K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO�� _C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP�� _E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killall � � � t \ � : � c�3 Xj6 � x��2k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��1k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��0k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��/s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��.k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��-u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��,s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��+s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��*q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��)qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��(qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��'qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��&q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���%k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��$e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��#k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��"k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs 4 � f � � h � � �u����A�# 4�j��Hk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��Gqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��Fk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��EmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��Dok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���Ck�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��BkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Aq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��@S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��?o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���>m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��=m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��<m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��;cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��:m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��9m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��8m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���7m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��6m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��5m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��4m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���3m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms B �w � � � P N'�Rp!�YB ���Xm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��WyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��VuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��U{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��Tu�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��Sm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��Rm? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��Qm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��Pm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���Om�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��Nm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��Mm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��Lm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��Km_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��Jk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��IkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � D � L � b � > � + � =�j�O�6� � n��lqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��kq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���jq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��i}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��hq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��gq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���fq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��eq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���dq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��cqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��bs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��as�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��`s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��_sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��^s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��]sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���\s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���[m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��Zsk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��Ym� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. _ S�k � � � > g m;s t]'�]�� _ �z��[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O�� [�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��~cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��}c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���|c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���{c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��zc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��yc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��xc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��wc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��vc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��ucc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��tco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��sc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���rc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��qc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��pc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��oc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��nc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��mc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � S z x � b�S�K�2�����" � � ��g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#�� _�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c�� cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk�� _{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,�� c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r�� c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup ^ T� } � B � : � � / ��%�@��_��w�=� � ^ ���7c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��6c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��5c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��4cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��3ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��2ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��1g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���0g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��/cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��.�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��-g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��,g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���+g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��*gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��)c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��(c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��'g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���&g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��%g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��$gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��#gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��"cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���!g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa�� cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X�� cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��� g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(�� c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � � < � F � � G e u� v� ���C�u�P � o��Pe} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��Oi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��Ne�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��Mam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��L]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��KaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��JaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��Ia�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��H]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���Ge�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��Fek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��Eic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��De�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��Cc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��Bg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Ac�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��@gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��?c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��>g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��=g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��<g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��;cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���:c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��9c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��8c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � ��' � � w � � W�`��h�s�T��q � � o��mc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��la�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��kak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��jag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���i�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��he�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��gsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��faG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��eaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��d[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��cgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��bku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��ak� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��`g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��_i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��^em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��]eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���\i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��[e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��Ze� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���Yi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��Xie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��Wiq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��Ve} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��Ue� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��Te� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��Sek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��Req �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��Qe� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) c ,� � j � 6 A ��p�K�~�9�����A � c � ��i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr�� e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��~e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���}e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��|a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��{gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��ze� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���ya�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���x� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��w[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��v[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��u[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��t[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��sg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��ri�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���qi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���pe�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���og�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��nc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set T t� � k x � D � � � q #��'�op�.�U��p � T v��%a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��$a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��#a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��"a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��!a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C�� [/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L�� g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1��� e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv�� e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg�� aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y�� [[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n�� [� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI�� [; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final��� i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM�� i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) } v)�> � | � � l � = � w �.�t�Q�v� X�Q � } d��D[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��C[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��B[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��A[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��@g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��?g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��>g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��=aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���<a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��;a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��:a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��9aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��8aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��7aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��6Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��5[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��4g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��3ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��2gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��1g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��0[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��/�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��.gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��-e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��,e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��+e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��*e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��)c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��(ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��'a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���&e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript � �/�- � c � y g � � � ~!���� 9�I��!� � �h��ba�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��ag? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���`[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��_[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��^[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���][�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��\c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��[g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���Zg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��Ygi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��Xg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��Wa5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��V�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��Us} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��TaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���S[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��R[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��Q[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���P[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��O[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��N[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��M[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��LgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���Kg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��Jg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��Ig5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��HeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��Ge�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��FeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��Eey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch merged J G�w � � ] � � �����R�a�f���0 J �a��~a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���}a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��|a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��{aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��za� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��yai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���xa�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��wg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��vgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��ug� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��tg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��sg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���rg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��qae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��pa�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��om_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���nm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��mm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��lm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��kg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��jgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��ig� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��hi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��gcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���fi�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��ea� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��daG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��cg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666) � D�m � J � � � -��%�� v �l��`� ]��gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g�� gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*�� g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)��� g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M�� k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V�� gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��5o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��4o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��3o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��2oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��1og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��0oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��/o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��.o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��-os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��,ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��+oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��*oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��)oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���(o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���'o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��&o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��%o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���$o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��#oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��"oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��!o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.�� o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m�� o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H�� g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��Tw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���S}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��Rs�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��Qws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��Pwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��Ow� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��Nwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��Mwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��Lso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��Kw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��Ju3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���Iu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��Huw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��GuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��Fu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��Eu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��Du[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���Cu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��Bu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��Ao[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��@o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��?o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��>o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��=oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��<o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��;oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��:o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��9o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��8oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���7o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��6uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr L y� � t � w x � ��~ p� ���A�_�| � L g��rS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��qGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��pG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��oGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���nG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��mG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��lO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��k]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��j� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���iq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���h}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��g}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���f}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��e}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���d{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��c{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��b{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���a{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���`{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���_{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��^wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��]wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��\{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��[{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��Z{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��YwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��Xw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��Ww� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��Vwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���Uw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) � �g�s � � k � p � ] >�dz�J�{��[��p � �Q��[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%�� Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW�� [W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)��� [�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX�� U_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo�� K� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��S} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W�� U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��~Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��}G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��|UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��{G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��zU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��yGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��xM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��wU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���vS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��uS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��tOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��sS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2 $ w �6�p. � � c � � k � O � l��1� �� �@��)`�17 � w e��6]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��5]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��4]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��3]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��2]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��1]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��0]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��/]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��.Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���-]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��,]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��+]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��*]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��)] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��(]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��']�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��&]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��%]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���$]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��#] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��"]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��!]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#�� M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g�� ]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��� ]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to "" � �h�8 � � � � � O � � � F�JPm�^��g)�n� � �4��Tm�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���S[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��Rmw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��QEE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��PE3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��Om �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��N{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��MyC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��LyM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��Ky�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���Jy�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��Iy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��Hy�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��Gm�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��Fm�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��Em� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��De? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��Cy �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��ByU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��Ay+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��@y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��?y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��>yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��=m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��<y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��;m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��:oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��9m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��8]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��7QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environment $ � �E�J � e � U ��w�v.��3��#��%���|E��4 � � Q��x_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��w_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��v_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��u_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��t_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��sK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��r_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��q_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��p_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��o_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��n_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��m]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��l]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��k]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��j]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��i]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��h]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��g]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��f]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��e]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��d_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��cE �Tim Powers <timp@redhat.com>>.��- rebuilt]��b__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��ac� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��`_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��__g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��^]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��]MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��\]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��[]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��Zm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��YE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��XE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��Wm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��Ve? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��Um] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code ) w �@�} � C � � ; � � N � � N � � )��<�O��3��1����(�<i � w x��!Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r�� Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N�� Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a�� Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��� Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse�� Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU�� eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX�� Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B�� ]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3�� K �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH�� ]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA�� c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��~cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��}co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��|ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��{_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��z_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��y_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulled Z �{ � � � � ��'����a�� � Z z��5s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��4q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��3qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��2qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��1qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��0q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���/k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��.e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��-k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��,k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��+k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��*s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��)s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��({�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��'{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��&{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��%s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���$Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��#Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��"Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix version � �% 7 � � �}�ku�r`�M � �?��Fm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��EcA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��Dm� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��Cm�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��Bm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���Am� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��@m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��?m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��>m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���=m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��<k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��;k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��:k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��9s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��8k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��7u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��6s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determined Y s � � � � ? � !2��A�� �� Y �"��[m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��Zm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���Ym�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��Xm�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��Wm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��Vm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��Um_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��Tk�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��SkS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��Rk�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��Qqc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��Pk�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��OmW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��Nok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���Mk�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��LkQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���Kq� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��JS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��Io�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���Hm�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��Gm�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket � �+ I � � 2 _�g�}�Y�F�X� � �2��oq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���nq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��mqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��ls� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��ks�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��js� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��isO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��hs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��gsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���fs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���em� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��dsk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��cm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���bm�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��ayA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��`uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��_{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��^u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��]m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��\m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps � t� > � @ � 'z�A�5�e��b � �C��c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R�� c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��~co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��}c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���|c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��{c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��zc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��yc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��xc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��wc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��vqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��uq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���tq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��s}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��rq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��qq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���pq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root 7 � � � D � k���?f�d��N�? � 7 _��mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init��� [�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z�� [� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&�� [�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O�� [�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V�� cM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��cy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��c� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter � N�� � ` � R � � G�X�J����+�v�&l � � j��4gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��3c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��2c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��1g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���0g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��/g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��.gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��-gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��,cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���+g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��*cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��)cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��(c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���'g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��&c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���%g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��$g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��#g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��"g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��!c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F�� c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk�� eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2�� a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]�� eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support > mk � ` � 7 � k � Z � �Z�d�e�(� > �P��Mc�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��Lg� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���Kc�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��JgK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��Ic�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��Hg] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��Gg% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��Fg; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��EcS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���Dc�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��Cc�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��Bc�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���Ac�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��@c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��?c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��>cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��=ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��<ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��;g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���:g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��9cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��8�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��7g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��6g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���5g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��ii[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��hem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��geG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���fi�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��ee� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��de� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���ci� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��bie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��aiq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��`e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��_e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��^e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��]ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��\eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��[e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��Ze} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��Yi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��Xe�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��Wam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��V]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��UaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��TaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��Sa�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��R]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���Qe�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��Pek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��Oic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��Ne�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B�� [�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��~[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��}g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��|i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���{i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���ze�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���yg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��xc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��wc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��va�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��uak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��tag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���s�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��re�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��qsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��paG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��oaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��n[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��mgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��lku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��kk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��jg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ��� e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]�� c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ�� c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u�� a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��� a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!�� e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� �� e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr�� e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J�� e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��e�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���e�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��AaU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��@Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��?[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��>g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��=ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��<gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��;g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��:[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��9�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��8gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��7e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��6e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��5e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��4e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��3c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��2ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��1a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���0e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��/a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��.a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��-a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��,a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��+a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��*[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��)g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���(e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��'e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��&aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��%aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��$a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��#a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��"[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��!g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��_s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��^aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���][�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��\[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��[[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���Z[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��Y[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��X[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��W[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��VgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���Ug�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��Tg� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��Sg5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��ReW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��Qe�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��PeW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��Oey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��N[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��M[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��L[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��K[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��Jg� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��Ig�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��Hg�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��GaC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���Fa�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��Ea� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��Da= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��CaW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��BaU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��{ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��za�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��ym_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���xm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��wm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��vm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��ug� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��tgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��sg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��ri� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��qcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���pi�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��oa� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��naG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��mg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��la�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��kg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���j[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��i[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��h[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���g[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��fc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��eg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���dg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��cgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��bg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��aa5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��`�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I�� c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h�� cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P�� e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7�� a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��a�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���a�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk�� gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��~g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��}g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���|g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���1o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��0o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��/o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���.o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��-oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��,oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��+o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��*o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��)o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��(g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��'g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��&g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��%gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��$g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��#g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��"gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��!g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j�� gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��QuU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��Pu� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��Ou� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��Nu[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���Mu�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��Lu�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��Ko[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��Jo�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��Io3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��Ho; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��Goi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��Fo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��Eoo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��Do�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��Co� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��Boi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���Ao� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��@uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��?o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��>o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��=o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��<oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��;og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��:oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��9o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��8o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��7os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��6ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��5oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��4oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��3oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���2o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?��o}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���n{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��m{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��l{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���k{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���j{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���i{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��hwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��gwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��f{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��e{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��d{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��cwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��bw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��aw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��`wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���_w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��^w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���]}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��\s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��[ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��Zwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��Yw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��Xwm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��Wwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��Vso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��Uw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��Tu3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���Su� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��Ruw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) f a�Z � D < � 4 � & b�O�5�i���"�| � f � �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8�� �'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���~s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��|}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���{}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��z}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���y{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��x{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��w{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���v{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���u� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��t� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���sq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���r}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��q}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���p}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) A �5 � ' c � P � 6 �Z���Q�J�4�i A �#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD� � d648aedf085223df5e8f7ed905d8f9b72da0de0ad1f31d8843b81e194e50082aD� � f5788de6b933519739beaf9dd076b85cbd486b1cad4dd223e01f76737a5b6f55D� � b7ac641a6d067883f75e5bbb06cf18575fcc11cf0089f1722aec5e585985c38eD� � c4d9a7247eb151f1e71810c9442a72c646b33c7e35c21fa59ad7267389da3509D� � 623e119df8eaf24ae0d44d5096fe0d52cb0759aaca604caf12c83e5f265991c0D� � 9eae48fa65ad5f649afa394e146043e4a5fbc4e7430d153428f46733a2fa2dcfD� � c7d5e6635b927c8a5233d3695c4e88ed06407de9deba15cd3dd37ed8cb0d9e68D� � f6f5fc3c40f2f8642b37ec69c27b48a20928442ff59677f6099f8c9afb937fd5D� � 25c8d179523cceaca58f4e759c6d6a876d1a8687c12cdb6cd32ff85d57eb6d1cD� � e5da24135cb9c0508f34ae58cb899683c328bb2476432c78a06894c1a97a35e3D� � a943e60ddd6c00b395f9ab38bfb1bca63dfb1073ea7346f8ff699a3978e066beD� � dfd7254fd68dcb0c9b9d0707f8a32cd86c0e4d167b0d82b346a50929b6f49f3eD� � 53b989659b024c32af63b247bd3af9cfd5854df49df28f064b436fea7c7f40adD� � 4f1af2a59d2ae7f3f3159fb2f7492a0aa7289b4bf68ea19e93f59fef9c69f71bD� � da02687d581a2cb907d94ef3f3e921f9880e84a0fd6bc9f1b76444420db8dbafD� � 8b6e296f098544ea750cdc5cf2c6ee17cbdc6a16b12454805cbc2498991ae0a8D� � 3e64e147b137913df7c5234d60849929fd8cebfd783ca892145eac68d8d87eedD� � eeaa2028571d208c141fcd568e1fe3f284fda0b6f827865394db89edbf36d046D� � 58400707ccae548994e214d05559f9821483781e4b4db36124425691ebefa91aD� � 060eba9dba40b426e4ccba17b87c93573de46fc688c7deb2625cccd9c7e286ecD� � b32347d16d9699a8b62ce129893db23bda0f5a3aaece403dce1d1b56719dd029D� � b161d20f2b4355653fa9862c4355c2b224f31232a2ffe0c652c8eb276fc3e348D� � 7efa291f7a0c2d6830f5e46932235533d57cdcd5aafc4bf3525b294c8c4abddeD� � 778235647936091712cf298a226751841707b2e3ccb0fcfe0c12091a064f8218D� � 051e23e5bc315681e9add0d601e71896b1b2e7d523b44f23c17d07737ff90230D� � a43d7a085c0e3e8ee2442c551e1cf26cd9d4ae654eece40ed0c0131a1486a83aD�~ � f6f8a257fed82ad9a0b1291221d4fc6e01b9fed4a051e580d5648c49551e841fD�} � 35b816d0de58ae46a18c300150ae6e2743f7d2b287e1336c2730493a3c1bfbf2D�| � 81199e60d75e99f3e98867fc812e6b8722d11c91c782f1bd1c8821c19167d250D�{ � f442422ec9357d3c439a78fe014d548c478ca570705fddf2a7f8baa0cf569057D�z � 3aaecd68916db5b5eca0d39c4dad16f1f3950bc3670c4c237e8a5d332d637ba5D�y � cad5eee4faf86643cc29d0d0b6da3bdb5e2703f61c91d0eef3ed7ce33b58a7d9D�x � 920685fab412d1acc74c6c8576ca8015cf73e545ea0acb1d1ebad8105eab53c2D�w � 72b8493bdac5033b74a76fc8c95d2a588852519fb6ec0f00d4fdaca2111c8ef3D�v � 0bb915ee445cd3c06c157aa729d91f2a04786913599ab60062373f698e008f8aD�u � aa31f5223092430c1132b53f7baf02473dec9989e1571dc8972dc1c6a7e126e0D�t � fa4e73b3d4e2aaa989f7d94e5471a735033f25020c11f84343f650ff1666bb73D�s � a082136f3f2bbdf042c7d9fbee3d12e1c506de526eddb8149884eb939f533071D�r � de7ba7d7f82894fd64629e077498efef8fb3003360b8d73fb050c906a50f1628D�q � dfa8396b00b7542f4a4eb574cf4abea92e0c9a61d5e52dc97d853c1391af42e6D�p � 85a65c14ed0e96ca4efa3a1b1baa1275400e5e1e749a3d4a82dfbce47c9d85e7D�o � 038b953863c6bd7eaa841a4188440828d9c38bf2231b968dd9850fba93d84474D�n � a24cc176133774f5163ceb81a733442baa4bf70ea390f4bf45d6b752252316e9D�m � 9c7831987686ac20a70e1f31dbb1ba2d63109998648f3e48ba56ab050877d12eD�l � 0fc646ee5735a239ee8ec303cdf781d0f6b9da9b666d7402448bdf80fd94c24dD�k � dcbe28914d7c5d64b4e2aa0b18dfb63e762af8a24aaafefe3da63c8d4dc2670cD�j � 1daf6b2c0303771bfd3cba7fa89262293636d0cd88966fba54fe71c246acadbeD�i � 8ea17e0f484071a5ac5c7cc99aae785b1f033cf60f6713ba16361e9ddf474486D�h � 11587488b313c89424ffc8b792d5556d739abd552efa6fa9da5fe49db9bf80c5D�g � eddb2fa622a269a5a4ca86bb3760067b798bb581165fc8aaeaca29b2d1de6614D�f � ff68a9b89f98d1c2562efbebc392b66e023909e0be1200453e0691930d609975D�e � a265ccb471736dbfae3bab33920c35da4db019c00df40a6b68943b40af0b39fdD�d � 00701123da326ca385e60d7c782ddc71a7d240db5efb3d97e59ea096cb5ef3fbD�c � 5b17a53b9d56d90142c813157cb706d4dd4f8b2b7193939300d32ddf7e5f8985D�b � eb4a283bb766e28a41cf2b31cb6ff9561db134996893eda8de6c36aab7fcaea9D�a � ee5629be925c7172b5d0e4e46bce831a842fdd54028e6ba4302471bf752d0e3c � = v o � Y �f�{�S�9�]� � �#��3�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��2�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��1s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��0s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���/s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���.}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��-}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��,��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��+� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��*�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��)�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��(�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��'s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��&s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���%s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���$}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��#}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���"}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��!� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 ( = a � � � :O's� ���( z��F�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Es� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Ds�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Cs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2��B�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��A��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��@��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��?� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��>�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��=�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��<�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��;s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��:s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���9s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���8}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��7��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��6��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��5� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��4�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 a � � 9 � � ��V�4�o�kw��o�t � a C��bU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��aUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��`G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��_UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��^G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��]U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��\Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��[M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��ZU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���YS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��XS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��WOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��VS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��US �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��TGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��SG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��RGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���QG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��PG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��OO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��N]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��M�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��L�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��K��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��J��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��I� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��H�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��G�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file " � ��N � � A � z � (��n�=�s �k*��\�Q� � p��]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��� ]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��~]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��}]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��|] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��{]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��zM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��yeO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��xek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��wY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��vQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��u[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���tU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��sQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��r]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��qQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��pQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��o[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���n[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��mU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��lK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��k]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��jS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��i]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���h]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��g]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��fU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���eS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��dO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��cU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postun ! � ] �3 � 4 � � E � � � � ? � ����(���`�$��w# � e��%yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��$y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��#y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��"y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��!yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"�� m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W�� oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P�� m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG�� ]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`�� ]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)�� ]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM�� ]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665) ` �.� e � � o � 1 � l ��P�D �P�U�p � ` _��A]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��@MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��?]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��>]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��=m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��<E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��;E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��:m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��9e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��8m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��7m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���6[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��5mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��4EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��3E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��2m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��1{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��0yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��/yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��.y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���-y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��,y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��+y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��*m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��)m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��(m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��'e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��&y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586) * � ��" � � ! � � , � � F � � 2 � .x'��O��:�z �L�}8�u��" � � N��k]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��j]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��i]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��h]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��ge/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��fcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��eeq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��dcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��cc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��bcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��acy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��`co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��_ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��^_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��]_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��\_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��[_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��Z_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��Y_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��X_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��W_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��VK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��U_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��T_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��S_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��R_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��Q_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��P]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��O]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��N]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��M]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��L]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��K]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��J]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��I]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��H]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��G_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��FE �Tim Powers <timp@redhat.com>>.��- rebuilt]��E__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��Dc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��C_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��B_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others. ! � �}7��K � b � 8 � o 8 � � A � C�S��)�� ��; � ~�� s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*�� {�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D�� {� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg�� {W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��� Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��~QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��}Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��|_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��{_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��z_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��yK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��x_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��w_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��v_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��u_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��t__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���s_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��r]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��qK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��peI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��oGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��n]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��mK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��l]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libs � M � E � �<�`�H���� � �z�� k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L�� s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.�� s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear � � � � � �x�e��o4�M�D � `��2mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��1ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���0k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��/kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���.q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��-S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��,o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���+m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��*m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��)m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��(cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��'m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��&m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��%m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���$m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��#m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��"m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��!m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx�� k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`�� k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed). c N� � � j s {�CA�E c �]��Au�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��@m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��?m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��>m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��=m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���<m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��;m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��:m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��9m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��8m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��7k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��6kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��5k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��4qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��3k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816) z �H� � � � 4 s ��{s<�!z �"��Uq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Tq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Sq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Rq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Qq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Pqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��Os� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��Ns�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��Ms� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��LsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��Ks� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��JsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���Is� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���Hm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��Gsk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��Fm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���Em�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��DyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��CuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��B{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild F � [ � < � T � l��'PV$\�]F � F V��lcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��kcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��jc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���ic�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���hc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��gc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��fc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��ec�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��dc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��cc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��bcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��aco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��`c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���_c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��^c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��]c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��\c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��[c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Zc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Yqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Xq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Wq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��V}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075) � ,� � � U | z�d�U�M�4� � � �F��c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2�� a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��~ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��}a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��|mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��{a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��z_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��ycg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��x_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��wc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��vc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���u_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��tc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��s_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��r_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��q[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���p[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��o[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��n[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��m[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802) � � � B � p � / � Y�V��6�D��`�_]�R � ��� g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R�� cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa�� cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X�� cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)��� g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(�� c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853) U r �8 � � Y ����L��c�Ny�g�u � U � ��6a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��5]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���4e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��3ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��2ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��1e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��0c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��/g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���.c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��-gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��,c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��+g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��*g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��)g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��(cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���'c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��&c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��%c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���$c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��#c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��"c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��!cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� �� g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431) � �G�y � T � � r � � X����8�A�rI�T��5 � � X��TsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��SaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��RaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��Q[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Pgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Oku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Nk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��Mg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��Li[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��Kem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��JeG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���Ii�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��He� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��Ge� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���Fi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��Eie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��Diq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��Ce} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��Be� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��Ae� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��@ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��?eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��>e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��=e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��<i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��;e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��:am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��9]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��8aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��7aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995) � n�i q � * � � h�4?��n�I�|�7 � � J��le3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��ke�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���je�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��ia�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��hgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��ge� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���fa�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���e� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��d[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��c[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��b[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��a[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��`g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��_i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���^i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���]e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���\g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��[c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Zc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Ya�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Xak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Wag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���V�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Ue�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.h } �_ � h � L � � � C P�p �_�I��z��GH�� } ��� e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv�� e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg�� aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u�� a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��~a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��}a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��|_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��{_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��z[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��y[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��x[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���wi� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��vi5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��ui] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���ti�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��si�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��re3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��qeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��pe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��oe�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��ne� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��me� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682) u �i < � ) � % � p � � + � 1�<��&�M��#�t y%u �+��+g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��*aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���)a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��(a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��'a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��&aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��%aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��$aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��#Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��"[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��!g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b�� ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\�� gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL�� g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z�� [�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �� �+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C�� [/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L�� g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1 � V � � � � F � D � � �0 �E�<�5�^�p�J � ���Gg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��Fgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��Eg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��Da5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��C�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��Bs} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��AaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���@[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��?[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��>[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���=[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��<[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��;[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��:[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��9gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���8g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��7g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��6g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��5eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��4e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��3eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��2ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��1[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��0[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��/[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��.[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��-g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��,g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049) � ,�< � � � � � I � `�/�U���p�h���$ � k��cgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��bg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��ag�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��`g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���_g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��^ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��]a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��\m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���[m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Zm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Ym�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Xg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��WgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Vg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Ui� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��TcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Si�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Ra� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��QaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Pg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��Oa�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Ng? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���M[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��L[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��K[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���J[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��Ic? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��Hg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings g ~�� � � M g � ( � h �]~��C;�!Z g �n��|g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��{g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��zgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��yg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���xg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��wk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��vgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���ug�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��tg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��sg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��re? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��qgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��pc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��ocq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��ne? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��ma� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��la� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��ka�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���ja�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��ia�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��haM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��ga� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��fai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���ea�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��dg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stack S v �l � � ` � = � : m ��*�(�9��� �E � S {��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.�� o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m�� o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H�� g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��~gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���}g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475) � � �L � ( � ^ � e � < � J��2}.�-�+�L�k � � p��;wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��:wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��9so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��8w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��7u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���6u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��5uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��4uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��3u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��2u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��1u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���0u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��/u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��.o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��-o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��,o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��+o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��*oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��)o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��(oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��'o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��&o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��%oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���$o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��#uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��"o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��!o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`�� oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi�� og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f�� oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u�� o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637) � � � \ � Y � d � T � WX�x�f�^�P��y�` � � ��W� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Vq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���U}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��T}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���S}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��R}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���Q{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��P{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��O{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���N{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���M{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���L{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��KwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��Jwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��I{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��H{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��G{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��FwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��Ew�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��Dw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��Cwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���Bw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��Aw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���@}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��?s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��>ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��=wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��<w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477) " � Q�o � � " � \ � Z � T n �$�e �^��u�d��3�< � W��y[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���x[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��wU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��vK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��u]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��tS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��s]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���r]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��q]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��pU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���oS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��nO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��mU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��lU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��kUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��jG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��iUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��hG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��gU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��fGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��eM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��dU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���cS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��bS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��aOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��`S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��_S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��^Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��]G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��\Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���[G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��ZG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��YO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��X]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h> # � ��F x � � K � � C � x 4�)���d����F�4��4�U � b�� ]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#�� M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g�� ]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):�� ] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1��� ]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|�� Q�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���~U�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��}Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��|]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��{Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��zQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %pre G ��V � � R � � Q | ! � ���8�{��/�39�V � G a��9yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��8y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���7y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��6y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��5y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��4m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��3m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��2m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��1e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��0y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��/yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��.y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��-y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��,y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��+yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��*m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��)y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��(m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��'oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��&m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��%]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��$QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��#]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��"]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��!]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D�� ]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a�� ]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489) " d �O �� x ? � � � � K �J��/-�U!�m%�r%�b � d ^��[_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��Z]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��Y]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��X]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��W]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��V]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��U]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��T]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��S]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��R]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��Q_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��PE �Tim Powers <timp@redhat.com>>.��- rebuilt]��O__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��Nc� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��M_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��L_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��K]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��JMU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��I]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��H]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��Gm% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��FE3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��EE3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��Dm� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��Ce? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��Bm] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��Am�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���@[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��?mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��>EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��=E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��<m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��;{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��:yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574) + � �^�W � � j � � M � | � h �J��R �l5��:��D��'��H � K��_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP�� _E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��~__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���}_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��|]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��{K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��zeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��yGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��x]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��wK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��v]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��u]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��t]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��s]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��r]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��qe/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��pcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��oeq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��ncE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��mc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��lcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��kcy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��jco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��ice �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��h_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��g_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��f_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��e_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��d_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��c_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��b_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��a_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��`K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��__? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��^_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��]_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��\_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL k U� � � d � � c ��r��x�� � k ��� k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r�� Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N�� Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a�� Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec��� Q�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse�� Q} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��QQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��Q�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775 L I � m U � � ����^T�B L �q��-m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��,m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��+m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���*m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��)k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��(k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��'k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��&s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��%k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��$u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��#s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��"s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��!q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b�� qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m�� qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg�� qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2�� q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon � z� � , � " � � � �&�S�5F��U� � �s��Dm�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��Cm�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��Bm_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��Ak�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��@kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��?k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��>qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��=k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��<mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��;ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���:k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��9kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���8q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��7S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��6o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���5m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��4m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��3m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��2cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��1m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��0m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��/m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���.m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache. [ S � � � G ���0����{ [ �<��Us� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��TsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���Ss� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���Rm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��Qsk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��Pm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���Om�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��NyA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��MuY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��L{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��Ku�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��Jm� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��Im? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��Hm�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��Gm� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���Fm�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��Em�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition � � � � � = �� b�C�[� s � � g��kco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��jc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���ic�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��hc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��gc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��fc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��ec} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��dc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��cqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��bq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���aq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��`}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��_q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��^q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���]q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��\q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���[q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Zqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��Ys� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��Xs�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��Ws� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��VsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage 4 �� � � � ] � ����;��c6 � 4 ���_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��~c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��}_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��|_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��{[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���z[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��y[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��x[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��w[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��vcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��ucy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��tc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���sc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���rc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��qc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��pc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��oc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��nc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��mc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��lcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin script T �Y � � � 6 � ! � Y � 3h%g�n�+� �\ � T f��cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F�� c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk�� eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2�� a� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]�� eY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��ee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��a�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r�� c� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878) j �J�X � � t s q % � f�=�q`�$�` � j Y��2cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���1c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��0c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��/c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���.c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��-c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��,c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��+cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��*ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��)ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��(g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���'g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��&cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��%�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��$g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��#g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���"g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��!gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.�� g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��� g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ�� g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscript � �e � / � � 0 � ^ � X�W��/� ��(�F��6 � ���Pi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��Oie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��Niq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��Me} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��Le� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��Ke� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��Jek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��Ieq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��He� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��Ge} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��Fi� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��Ee�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��Dam �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��C]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��BaO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��AaY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��@a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��?]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���>e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��=ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��<ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��;e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��:c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��9g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���8c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��7gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��6c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��5g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��4g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��3g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanup � �@ � I � z Q � \ � � =���Z������ � J��jg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��ii�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���hi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���ge�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���fg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��ec�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��dc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��ca�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��bak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��aag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���`�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��_e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��^sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��]aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��\aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��[[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Zgq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Yku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Xk� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��Wg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��Vi[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��Uem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��TeG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���Si�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��Re� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��Qe� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet q c � : � � H � �U�Z�f �-�<����H � q P��_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM�� i5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��i] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���~i�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��}i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��|e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��{eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��ze3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��ye�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��xe� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��we� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��ve3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��ue�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���te�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��sa�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��rgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��qe� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���pa�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���o� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��n[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��m[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��l[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��k[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default perms | �C�- � ~ ^ � x + , � d�a�}�,��9�N ��� | � ��&�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��%gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��$e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��#e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��"e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��!e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1�� c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d�� ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��� e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv�� a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch��� e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]�� c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ�� c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u�� a� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)��� a�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��a{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��a5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1 x !�q � 2 � e � Y � ^ Z��@�y�@�>�t�� x � ��D[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��CgS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���Bg�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��Ag� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��@g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��?eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��>e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��=eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��<ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��;[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��:[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��9[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��8[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��7g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��6g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��5g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��4aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���3a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��2a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��1a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��0aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��/aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��.aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��-Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��,[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��+g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��*ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��)gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��(g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��'[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings i �'� � � @ � R � , ����E�ex�i�f��x � i � ��cm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��bg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��agO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��`g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��_i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��^cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���]i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��\a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��[aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Zg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��Ya�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Xg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���W[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��V[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��U[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���T[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��Sc? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��Rg�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���Qg� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��Pgi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��Og� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��Na5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��M�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��Ls} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��KaU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���J[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��I[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��H[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���G[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��F[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��E[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch p , � � � � a � p�u���?Y��Z �O p �Z��}g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��|e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��{gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��zc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��ycq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��xe? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��wa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��va� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��ua�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���ta�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��sa�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��raM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��qa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��pai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���oa�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��ng� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��mgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��lg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��kg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��jg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���ig�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��hae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��ga�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��fm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���em�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��dm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026) p �p � � � � � _��U��I��&#V�� p � ��o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j�� gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K�� g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��gm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���g�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V�� gI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���g�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��~g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb � �<� � ~ � 2 � K � S�|[��*�1���Q�I � c��8o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��7o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��6o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��5o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��4oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��3o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��2oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��1o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��0o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��/oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���.o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��-uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��,o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��+o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��*o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��)oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��(og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��'oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��&o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��%o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��$os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��#ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��"oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��!oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r�� oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��� o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �� o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot � � � � 6 � U � w � �(x�r�u�E�T��r � ���V{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��UwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��Twu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��S{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��R{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��Q{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��PwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��Ow�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��Nw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��Mwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���Lw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��Kw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���J}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��Is�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��Hws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��Gwi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��Fw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��Ewm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��Dwg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��Cso �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��Bw[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��Au3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���@u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��?uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��>uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��=u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��<u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��;u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���:u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��9u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packages � w�o � a � � � � q ��F�`��`�Y�C� � ���p{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��o{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��n{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��m�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��ls�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ks� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���j}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��i}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���h}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��g}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���f{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��e{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��d{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���c{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���b� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��a� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���`q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���_}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��^}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���]}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��\}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���[{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��Z{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��Y{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���X{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���W{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) C <�) � � 3 � D ��D�=�'�\4p�] � C ���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���~}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���|}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��{}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���z{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��y{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��x�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ws� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��vs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���us� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���t}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��s}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���r}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��q}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � q$ � ~ � � � ��f�� �!�E�> � ��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>�� �)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � q$ � ~ � � � ,��6�����> � �2��/�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��.��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��-��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��,� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��+�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��*�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��)�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��(s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��'s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���&s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���%}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��$��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��#��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��"� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��!�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) y� � � 4 X���u6�S��#��!� w��GU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���FS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��ES{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��DOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��CS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��BS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��AGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��@G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��?Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���>G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��=G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��<O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��;]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��:�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2��9�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��8��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��7��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��6� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��5�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��4�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��3�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��2s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��1s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���0s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) " S �s � x � e F � l ! � �R����c�x�"�n � � S 8��i] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��h]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��gM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��feO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��eek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��dY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��cQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��b[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���aU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��`Q�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��_]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��^Q= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��]Q�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��\[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���[[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��ZU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��YK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��X]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��WS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��V]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���U]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��T]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��SU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���RS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��QO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��PU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��OU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��NUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��MG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��LUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��KG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��JU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��IGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��HM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed) # i �n�c% � � � � 1 � � � n .�n*�C�x�3��/�y.Y � � i K�� y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W�� oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P�� m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a�� ]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��~Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���}]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��|]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��{]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��z]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��y] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��x]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��w]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��v]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��u]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���t]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��s] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��r]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��q]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��pM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��o]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��n] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���m]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��l]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��k]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��j]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup � Y�( � X � q � T ��^� �[ ��?�3��?�D � G��*m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��)E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��(E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��'m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��&e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��%m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��$m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���#[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��"mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��!EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:�� E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M�� {# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\�� yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a�� yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez��y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"�� m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though. $ p � J � � / - � U ! � m %�r%�b�d� ��3�s#�^�K � p l��Ncy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Mco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Lce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��K_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��J_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��I_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��H_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��G_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��F_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��E_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��D_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��CK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��B_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��A_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��@_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��?_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��>_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��=]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��<]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��;]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��:]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��9]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��8]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��7]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��6]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��5]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��4_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��3E �Tim Powers <timp@redhat.com>>.��- rebuilt]��2__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��1c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��0_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��/_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��.]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��-MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��,]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��+]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & � �\�> � � F � � ` ) � � . � � � 8����<�B�����Q�sP � ���tQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��sQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��rQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��qQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��pQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��oQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��nQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���mQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��lQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��kQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��jQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��i_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��h_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��g_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��fK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��e_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��d_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��c_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��b_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��a__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���`_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��_]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��^K �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��]eI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��\Gm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��[]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��ZK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��Y]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��X]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��W]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��V]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��U]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Te/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��ScO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Req �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��QcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Pc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��OcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/random � � � . � � C�4���} ��vL � �,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2�� q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��~e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��}k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��|k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��{k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��zs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��ys� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��x{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��w{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��v{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��us�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade . 2 � � � bX�FP�M;|(dr � 2 � ��o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� ��m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option��� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx�� k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`�� k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z�� k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L�� s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �>�D � q � S d �s��?���3� y��-m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��,m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��+m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��*m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���)m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��(m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��'m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��&m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��%m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��$k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��#kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��"k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��!qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-�� k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`�� mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk�� ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��� k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\�� kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt ? � f �4�<�R�.��-�Z � ? � ��Aq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���@q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��?q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���>q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��=qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��<s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��;s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��:s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��9sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��8s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��7sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���6s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���5m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��4sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��3m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���2m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��1yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��0uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��/{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��.u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � Y � [ � B � #�*\�P����}�B � ���Uc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Tc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��Sc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Rc�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Qc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Pc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Occ �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��Nco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Mc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Lc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Kc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Jc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Ic� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Hc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Gc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��Fqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Eq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Dq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��C}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��Bq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches � � � C � j ���>e�c��M�>�6 � �-��ja�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��imU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��ha�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��g_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��fcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��e_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��dc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��cc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���b_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��ac� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��`_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��__E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��^[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���][�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��\[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��[[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��Z[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��YcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Xcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Wc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Vc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) � �8� G F � � M� v��;�3�}(�� �9 � ���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��� g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��~gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��}gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��|cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���{g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��zcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��ycQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��xc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���wg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��vc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���ug�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��tg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��sg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��rg� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��qc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��pg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��oc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��neu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��ma� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��leY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��kee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default � ��I � X � d � � � = �A�T��\��&� � �P�� c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O��c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b�� ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� �� g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)��� g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R�� cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��9i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��8em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��7eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���6i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��5e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��4e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���3i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��2ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��1iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��0e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��/e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��.e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��-ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��,eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��+e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��*e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��)i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��(e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��'am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��&]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��%aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��$aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��#a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��"]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���!e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef�� ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d�� ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%�� e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���Sa�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���R� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��Q[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��P[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��O[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��N[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��Mg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Li�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Ki�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Je�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Ig�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Hc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��Gc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Fa�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Eak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Dag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���C�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Be�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��AsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��@aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��?aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��>[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��=gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��<ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��;k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��:g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���pe�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��oc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��nc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��ma� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���la�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��ka{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��ja5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��i_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��h_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��g[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��f[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��e[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���di� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��ci5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��bi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���ai�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��`i�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��_e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��^eM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��]e3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��\e�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��[e� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Ze� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��Ye3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Xe�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���We�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Va�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��UgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Te� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b�� ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\�� gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL�� g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z�� [�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �� �+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��� e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��~a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��}a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��|a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��{a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��z[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��yg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���xe�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��we� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��vaq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��uaU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��ta� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��sa5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��r[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��qg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��/s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��.aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���-[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��,[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��+[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���*[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��)[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��([W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��'[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��&gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���%g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��$g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��#g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��"eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��!e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm�� ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd�� [q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh�� [y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W�� [W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ��aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��Kae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Ja�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Im_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Hm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Gm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Fm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Eg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��DgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Cg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Bi� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��AcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���@i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��?a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��>aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��=g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��<a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��;g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���:[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��9[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��8[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���7[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��6c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��5g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���4g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��3gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��2g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��1a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��0�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���eg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��dk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��cgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���bg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��ag� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��`g�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��_e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��^gi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��]c3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��\cq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��[e? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��Za� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Ya� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��Xa�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Wa�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Va�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��UaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Ta� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Sai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Ra�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Qg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Pgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Og� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Ng�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Mg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Lg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���~o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��}oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��|oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��{o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��zo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��yo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��xg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��wg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��vg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��ugM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��tg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��sg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��rgW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��qg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��pg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��og3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��ngq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��mg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��lg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��kgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���jg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��ig�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��hg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��ggk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��fg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��!uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f�� u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��� u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c�� u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� ��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`�� oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi�� og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f�� oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u�� o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?��?}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���>{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��={c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��<{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���;{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���:{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���9{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��8wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��7wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��6{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��5{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��4{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��3wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��2w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��1w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��0wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���/w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��.w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���-}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��,s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��+ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��*wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��)w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��(wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��'wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��&so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��%w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��$u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���#u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��"uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) ! � a�Z � D � � � + � f � a ���T h�D���K� � n��`]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���_]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��^]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��]U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���\S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��[O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��ZU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��YU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��XUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��WG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��VUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��UG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��TU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��SGq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��RM�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��QU� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���PS�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��OS{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��NOa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��MS' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��LS �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��KGk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��JG� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��IGk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���HG�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��GG3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��FO�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��E]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��D� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Cq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���B}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��A}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���@}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) # q �B�s � } S � � h � �^�C��=�h�U�>�t� � q <��] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM�� ]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���~]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��}] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��|]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��{]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��zM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��y]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��x] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���w]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��v]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��u]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��t]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��s] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��r]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��qM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��peO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��oek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��nY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��mQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��l[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���kU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��jQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��i]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��hQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��gQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��f[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���e[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��dU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��cK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��b]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��aS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressed � �@�a � J � R X � K +��;�.c��*�X�� � �(��!m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J�� m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v�� m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P�� e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez�� y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e�� yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x�� ]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D�� ]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a�� ]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b�� ]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��Y; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script � �# y � c � � $ � S����_�^ �CA�i5 � � D��?]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��>_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��=E �Tim Powers <timp@redhat.com>>.��- rebuilt]��<__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��;c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��:_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��9_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��8]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��7MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��6]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��5]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��4m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��3E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��2E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��1m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��0e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��/m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��.m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���-[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��,mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��+EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��*E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��)m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��({# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��'yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��&yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��%y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���$y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��#y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��"y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel , � �S�m � � Y � � U � N � v � a��D�s�_ �A��I�c,��1�� � ]��k__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���j_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��i]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��hK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��geI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��fGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��e]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��dK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��c]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��b]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��a]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��`]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��_]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��^e/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��]cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��\eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��[cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Zc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��YcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��Xcy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Wco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Vce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��U_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��T_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��S_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��R_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��Q_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��P_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��O_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��N_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��MK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��L_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��K_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��J_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��I_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��H_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��G]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��F]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��E]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��D]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��C]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��B]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��A]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��@]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2 O �7�n7 � � @ � B � R � � (�� ��:�O �1��k�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��s�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��s� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg�� {W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��s�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���~Q�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��}Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��|Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��{Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��zQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��yQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��xQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���wQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��vQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��uQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��tQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��s_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��r_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��q_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��pK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��o_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��n_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��m_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��l_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root � � � t \ � : � c�3 Xj6 � x��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b�� qW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m�� qm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg�� qa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2�� q�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon��� k�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��e� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��k� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��k�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs 4 � f � � h � � �u����A�# 4�j��,k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��+qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��*k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��)mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��(ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���'k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��&kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���%q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��$S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��#o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���"m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��!m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP�� cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:�� m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �� m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonyms B �w � � � P N'�Rp!�YB ���<m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��;yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��:uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��9{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��8u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��7m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��6m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��5m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��4m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���3m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��2m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��1m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� ��0m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��/m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��.k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��-kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin � D � L � b � > � + � =�j�O�6� � n��Pqo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��Oq�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���Nq� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��M}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��Lq�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��Kq�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���Jq� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��Iq�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���Hq�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��Gqc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��Fs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��Es�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��Ds� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��CsO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��Bs� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��AsG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���@s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���?m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��>sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��=m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled. _ S�k � � � > g m;s t]'�]�� _ �z��f[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��e[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��d[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��ccM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��bcy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��ac� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���`c�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���_c�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��^c �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��]c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��\c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��[c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Zc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Ycc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��Xco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Wc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Vc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Uc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Tc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��Sc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��Rc} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��Qc�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208 � � � S z x � b�S�K�2�����" � � ��}g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��|g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��{c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��zg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��yc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��xeu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��wa� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��veY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��uee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��ta�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��smU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��ra�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��q_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��pcg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��o_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��nc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��mc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���l_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��kc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��j_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��i_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��h[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���g[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup ^ T� } � B � : � � / ��%�@��_��w�=� � ^ ���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5�� c� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.�� g�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch��� g�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ�� g? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��gU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��gA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��cm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���g�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��cc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��cQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��c� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���g�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(�� c�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���g�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��~g�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) ) � � < � F � � G e u� v� ���C�u�P � o��4e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��3i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��2e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��1am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��0]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��/aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��.aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��-a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��,]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���+e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��*ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��)ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��(e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P��'c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��&g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���%c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��$gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��#c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��"g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��!g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO�� g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY�� cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��� c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O�� c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k�� c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in � ��' � � w � � W�`��h�s�T��q � � o��Qc �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��Pa�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��Oak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��Nag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���M�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Le�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��KsA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��JaG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��IaQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��H[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��Ggq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��Fku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��Ek� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��Dg�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��Ci[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��Bem �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��AeG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���@i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��?e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��>e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���=i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��<ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��;iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��:e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��9e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��8e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��7ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��6eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��5e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore) c ,� � j � 6 A ��p�K�~�9�����A � c � ��ji�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��ie3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��heM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��ge3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��fe�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��ee� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��de� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��ce3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��be�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���ae�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��`a�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��_gA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��^e� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���]a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���\� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��[[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��Z[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��Y[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��X[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��Wg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Vi�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Ui�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Te�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���Sg�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��Rc�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is set T t� � k x � D � � � q #��'�op�.�U��p � T v�� a� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��a} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��a�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��a5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��g5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���e�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��e� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg�� aq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��aU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��~a� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��}a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��|[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��{g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���ze�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��yc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��xc5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��wa� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���va�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��ua{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��ta5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��s_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��r_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��q[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��p[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��o[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���ni� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��mi5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��li] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���ki�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128) } v)�> � | � � l � = � w �.�t�Q�v� X�Q � } d��([q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��'[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��&[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��%[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��$g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��#g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��"g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��!aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��� a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p�� a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM�� a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ�� aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY�� aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ���+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1�� c� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d�� ak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI�� a5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3��� e�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscript � �/�- � c � y g � � � ~!���� 9�I��!� � �h��Fa�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��Eg? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���D[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��C[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��B[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���A[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��@c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��?g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���>g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��=gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��<g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��;a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��:�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv��9s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��8aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���7[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��6[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��5[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���4[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��3[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��2[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��1[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[��0gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���/g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��.g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��-g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��,eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��+e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��*eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��)ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch merged J G�w � � ] � � �����R�a�f���0 J �a��ba�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���aa�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��`a�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��_aM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��^a� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��]ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���\a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��[g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Zgs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Yg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Xg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Wg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Vg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��Uae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Ta�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��Sm_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���Rm�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��Qm�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��Pm�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��Og� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��NgO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��Mg� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��Li� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��KcY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���Ji�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��Ia� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��HaG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��Gg� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666) � D�m � J � � � -��%�� v �l��`� ]��|gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��{g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��zg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��yg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��xgq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��wg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��vg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��ugm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���tg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��sg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��rg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��qgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��pg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���og�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��nk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��mgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���lg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��kg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��jg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��ie? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��hgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��gc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��fcq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��ee? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��da� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��ca� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300) x � � � � n - z � x ��i�U�n �"�*�S�2 � x O��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r�� oy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)��� o�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)��� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� �� o�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��oK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��o�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��o�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��o�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H�� g�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��gM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��~g�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��}g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502) � ��� g � u � ] � A Y�X�V�w��+�G�R�i�/ � x��8w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���7}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��6s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��5ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��4wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��3w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��2wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��1wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��0so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��/w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��.u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���-u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��,uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��+uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��*u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��)u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��(u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���'u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��&u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��%o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��$o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��#o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��"o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��!oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �� o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� �� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j�� oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgr � y� � t � w x � ��~ p� ����U�o � ���S{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��R{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��Q{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���P{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���O� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��N� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���Mq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���L}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��K}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���J}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��I}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���H{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��G{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��F{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���E{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���D{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���C{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��BwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��Awu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��@{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��?{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��>{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��=wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��<w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��;w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��:wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���9w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) v <�) � � C � ] ��]�V�@�ug�� � v ���ls� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���k}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��j}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���i}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��h}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���g{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��f{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��e�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ds� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��cs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���bs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���a}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��`}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���_}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��^}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���]{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��\{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��[{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��Z�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��Ys�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Xs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���W}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��V}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���U}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��T}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) d q$ � ~ � � ���3 H � z�d � �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���~}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���|}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��{� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��z�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��y�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��x�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ws� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��vs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���us� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���t}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��s}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���r}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��q}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��p�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��o�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ns� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ms�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) c �5 J " n � g�Q�^�s� y � c � ��s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#�� �)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � �5 J " n � }��#�8\� � �2��&�'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.��%��E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��$��C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��#� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��"�)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��!�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez�� �[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2�� �'�= �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.����E �Jai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����C �Linar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �' �Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�S �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers ! � �* � H � e � � 5 � � 3 � -G����>��7s��N�=� � X��GU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��FK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��E]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��DS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��C]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���B]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��A]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��@U5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���?S�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��>O�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��=U] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��<U5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��;Uq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��:G� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��9UW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��8G�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��7U9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by defaultZ��6Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��5M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��4U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���3S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��2S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��1Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��0S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��/S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��.Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��-G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��,Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���+G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��*G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��)O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��(]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>�"��'�'� �Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update # _ e � � P � � � U � � M ��>�3���n���P�>��> � _ ���j]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��i]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��h]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��g]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��f] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��e]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��d]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��c]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��b]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���a]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��`] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��_]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��^]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��]M�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��\]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��[] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���Z]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18p��Y]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��X]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��W]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��V] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��U]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��TM3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��SeO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��Rek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��QY7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��PQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��O[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���NU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��MQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��L]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��KQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��JQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��I[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���H[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linux � �N� � � � � 7 � � � o )�3��2�K�}.��8 � ���y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J��m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P��e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez�� y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e��yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��~y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��}y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��|y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pagesb��{yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��zm�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��yy! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��xm �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��woC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P��vm�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��u]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��tQE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��s]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��r]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��q]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��p]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��o]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��n]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��m]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��l]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��kY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf ! S V��@ � � u i 0 � u � z <��;�� �F�^�c � S t��(]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��']5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��&]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��%]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��$]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��#]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��"]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��!_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0�� E �Tim Powers <timp@redhat.com>>.��- rebuilt]�� __ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files�� c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}�� _� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta�� _g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750)G��m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:��E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:��E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8��m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P��e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec��m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:�� E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB�� m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M�� {# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\�� yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a�� yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x. , � �d�` � Y " � � � l � � O � ~ �j�L �T �n7��<� �F��) � � Q��T_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��SK �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��R_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��Q_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��P_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��O_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��N__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���M_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��L]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��KK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��JeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��IGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��H]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��GK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��F]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��E]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��D]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��C]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��B]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Ae/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��@cO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��?eq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��>cE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��=c# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��<cW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/randoml��;cy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��:co �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��9ce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��8_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��7_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��6_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��5_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��4_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��3_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��2_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��1_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��0K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��/_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��._� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��-_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��,_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��+_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��*]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��)]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startup � �^�` � p 8 � F � � *;�X�#m^ � y��ke� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��jk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��ik�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��hk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��gs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��fs� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��e{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��d{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��c{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��bs�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade .���aQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��`Q�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��_Qo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��^Q�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��]Q� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��\Q�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��[Qu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���ZQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��YQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��XQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��WQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��V_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��U_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-caps * � 1 � U � = � ������F< � *~��|m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��{m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���zm� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��yk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��xk�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��wk� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L��vs) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��uk�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC�,��tu�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��ss�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��rs� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��qq�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��pqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��oqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��nqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��mq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���lk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528) � � � 6 � , ���*�0�]�?P��_ � � ��m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd��m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-�� k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`�� mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk�� ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders��� k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\�� kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP��cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:��m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �� m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���~m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��}m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled � [ � � � O ���8��� � ���#s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���"m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��!sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7�� m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.��� m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[�� yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse�� uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK�� { �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixesy��m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)���m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(��m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s��m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc S ��} � j � | � � ��u�B�#�;� � S ���9c�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��8c�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��7c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��6c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��5c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��4c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��3qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��2q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���1q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��0}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��/q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches� ��.q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���-q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��,q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���+q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��*qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��)s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��(s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��'s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��&sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��%s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��$sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config V � � � � � � } ���4�[���/ V �T��M_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��L_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��K[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���J[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��I[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��H[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��G[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��FcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Ecy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Dc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Cc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426)���Bc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Ac �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��@c�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��?c�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��>c� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��=c�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��<cc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��;co �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��:c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600) Z ��� W � � � 4 � � W�1f#e�l�)� � Z a��gcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��fcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��ec� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���dg�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��cc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���bg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��ag�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��`g�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��_g� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��^c� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��]g� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��\c�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��[eu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��Za� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��YeY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��Xee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default�-��Wa�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��VmU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��Ua�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��T_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��Scg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��R_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��Qc�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��Pc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���O_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��Nc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306) X b��B � P � � l � k i �^�5�i�X� � X �O�� c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���~c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��}c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��|c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��{cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��zce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��yce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��xg�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���wg�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R��vcE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e��u�1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��tg- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��sg� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281)���rg�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��qgq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��pc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��oc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��ng�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���mg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��lg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��kgU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��jgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��icm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���hg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization fails � g �o ) � 9 � � : � h�b�a�9���2�P� � k�� iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo�� e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@�� e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)��i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� ��e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite��am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a��]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V��aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef�� ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d�� ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%�� e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826)�P�� c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|�� g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO��g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY��cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)���c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires � � O � X � � ` � k��L��i� ��) ���8i�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���7e�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���6g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��5c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��4c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��3a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��2ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��1ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���0�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��/e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��.sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��-aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��,aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��+[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��*gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��)ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��(k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��'g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig`��&i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��%em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��$eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���#i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��"e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��!e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet��� i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e�� ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patch q � � / h h � j j�o!�&�2���m��d q �n��S[� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��R[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���Qi� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��Pi5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��Oi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���Ni�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��Mi�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��Le3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��KeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��Je3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��Ie�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��He� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Ge� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��Fe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Ee�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���De�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Ca�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��BgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Ae� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends���@a�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���?� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��>[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��=[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��<[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��;[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��:g1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��9i�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac) ! ^ � � r � � J * � D ���0�-��Ii�V�R��X � ^ O��te= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��se�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��re �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��qe3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��pc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��oak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��na5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���me�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��la� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��ka�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��ja} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��ia�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��ha5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��g[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��fg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���ee�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��de� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��caq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��baU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��aa� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��`a5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��_[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��^g� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch���]e�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��\c[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��[c5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��Za� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���Ya�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��Xa{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��Wa5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��V_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��U_�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��T[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig] t �� � [ � � � O � � C � H�D��*�c��*�(�^ � t [��gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"���g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\�� eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm�� ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd�� [q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh�� [y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W�� [W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741���a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p��a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM��a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ�� aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY��aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910)Y��~aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��}Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��|[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��{g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��zga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��ygU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��xg5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��w[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� ��v�+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��ugy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch merged f �� } � � . � @ � ��m��3�Sf�W�T�{ � f Y��1gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��0g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��/i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��.cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���-i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��,a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��+aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��*g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��)a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��(g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���'[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��&[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��%[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���$[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��#c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��"g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���!g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f�� gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7�� g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI�� a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� �� �%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildv�� s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���[�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z��[� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W��[W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� ��[�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot @ �� � � � � � R�a�f���0J� �K��@ P��Le? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��Kgi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��Jc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��Icq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��He? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��Ga� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Fa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��Ea�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Da�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Ca�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��BaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Aa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��@ai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���?a�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��>g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��=gs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��<g� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��;g�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��:g= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���9g�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01a��8ae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��7a�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��6m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���5m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��4m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��3m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��2g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544) � ! � � 7 � � / �� ��v�j�G�Dw( � K��eg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��dg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��cg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��bgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��ag�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��`g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��_gW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��^g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��]g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��\g3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��[gq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��Zg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��Yg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��Xgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���Wg�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��Vg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��Ug� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��Tgk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��Sg�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)���Rg�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��Qk3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��PgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���Og�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��Ng� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��Mg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688) ` [ � Y � j � J � 6 � O�v� �4��Y�W�d�O � ` j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m��oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� ��o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� �� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���~o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��}uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��|o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��{o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��zo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��yoU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��xog �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��woa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u��vo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��uo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��tos �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��sou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��roW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��qoo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��poy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���oo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)���no� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��mo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��lo�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���ko� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��joW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��ioK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��ho�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��go�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��fo�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517) # �V�: R � Q � O � p � � $�@�K�b�(�%�0 �# g��"{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��!{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�� wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p��wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m��wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo��so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g��w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743)c��uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|�� u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f�� u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool��� u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c�� u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warnings � �! � | � � 5 � "� y�'�`�@��<�H� � � Z��@Gq �Jeff Johnson <jbj@redhat.com>7Q(@- nslookup fixes (#2463). - missing files (#3152).�a��?M�w �Stepan Kasal <kasal@math.cas.cz>7*�- nslookup patched: to count numRecords properly to fix subsequent calls to ls -d to parse "view" and "finger" commands properly the view hack updated for bind-8 (using sed)w��>U� �Bill Nottingham <notting@redhat.com>7@- add ISC patch - add quick hack to make host not crash - add more docs���=S�; �Cristian Gafton <gafton@redhat.com>6�v�- add probing information in the init file to keep linuxconf happy - dont strip libbinde��<S{ �Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 3)V��;Oa �Preston Brown <pbrown@redhat.com>6�@- removed 'done' output at named shutdown.;��:S' �Cristian Gafton <gafton@redhat.com>6�G�- version 8.2g��9S �Cristian Gafton <gafton@redhat.com>6��- patch to use the __FDS_BITS macro - build for glibc 2.1W��8Gk �Jeff Johnson <jbj@redhat.com>6�- change named.restart to /usr/sbin/ndc restartf��7G� �Jeff Johnson <jbj@redhat.com>6��- install man pages correctly. - change K10named to K45named.W��6Gk �Jeff Johnson <jbj@redhat.com>5у�- don't start if /etc/named.conf doesn't exist.���5G�A �Jeff Johnson <jbj@redhat.com>5�=�- autmagically create /etc/named.conf from /etc/named.boot in %post - remove echo in %post;��4G3 �Jeff Johnson <jbj@redhat.com>5~u@- merge in 5.1 mods� ��3O�o �Manuel J. Galan <manolow@step.es>50��- Several essential modifications to build and install correctly. - Modified 'ndc' to avoid deprecated use of '-'�*��2]�y �Scott Lampert <fortunato@heavymetal.org>4�V@- Used buildroot - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include on Redhat 5.0 instead of <nlist.h>� ��1� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���0q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���/}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��.}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���-}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��,}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���+{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��*{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��){k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���({�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���'{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���&{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��%wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��$wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��#{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # � ��U � � N � � � e � T � � #�,��^I��f �V��I � p��c]� �Bernhard Rosenkraenzer <bero@redhat.com>9��- Add some missing man pages (taken from bind8) (Bug #18794)@��b]' �Bernhard Rosenkraenzer <bero@redhat.com>9IJ@- 9.0.0 finalJ��a]; �Bernhard Rosenkraenzer <bero@redhat.com>9��@- rc5 - fix up nslookup8��`] �Bernhard Rosenkraenzer <bero@redhat.com>9�@- rc4=��_]! �Bernhard Rosenkraenzer <bero@redhat.com>9m�@- 9.0.0rc1>��^M3 �Prospector <bugzilla@redhat.com>9l]�- automatic rebuildX��]eO �Florian La Roche <Florian.LaRoche@redhat.de>9hi@- add "exit 0" for uninstall casef��\ek �Florian La Roche <Florian.LaRoche@redhat.de>9e�@- add prereq init.d and cleanup install sectionF��[Y7 �Trond Eivind Glomsrod <teg@redhat.com>9\��- fix the init script|��ZQ�) �Nalin Dahyabhai <nalin@redhat.com>9Y�- make libbind.a and nslookup.help readable again by setting INSTALL_LIB to ""�Q��Y[�I �Bernhard Rosenkranzer <bero@redhat.com>9WE�- Fix up the initscript (Bug #13033) - Fix build with current glibc (Bug #12755) - /etc/rc.d/init.d -> /etc/init.d - use %{_mandir} rather than /usr/share/man���XU�= �Bill Nottingham <notting@redhat.com>9N @- fix conflict with man-pages - remove compatibilty chkconfig links - initscript munging�I��WQ�C �Nalin Dahyabhai <nalin@redhat.com>9Gs�- modify logrotate setup to use PID file - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time - actually bump the release this timeC��V]- �Bernhard Rosenkraenzer <bero@redhat.com>9:D�- FHS complianceE��UQ= �Nalin Dahyabhai <nalin@redhat.com>8���- clean up restart patch�%��TQ�{ �Nalin Dahyabhai <nalin@redhat.com>8��@- provide /var/named (fix for bugs #9847, #10205) - preserve args when restarted via ndc(8) (bug #10227) - make resolv.conf(5) a link to resolver(5) (bug #10245) - fix SYSTYPE bug in all makefiles - move creation of named user from %post into %preW��S[W �Bernhard Rosenkranzer <bero@redhat.com>8�c@- Fix TTL (patch from ISC, Bug #9820)���R[�S �Bernhard Rosenkranzer <bero@redhat.com>8��@- fix typo in spec (it's %post, without a leading blank) introduced in -6 - change SYSTYPE to linuxX��QU_ �Bill Nottingham <notting@redhat.com>8���- pick a standard < 100 uid/gid for namedo��PK� �Elliot Lee <sopwith@redhat.com>8��@- Pass named a '-u named' parameter by default, and add/remove user.P��O]G �Bernhard Rosenkraenzer <bero@redhat.com>8�m�- fix host mx bug (Bug #9021)f��NS} �Cristian Gafton <gafton@redhat.com>8�y@- rebuild to fix dependencies - man pages are compressedn��M]� �Bernhard Rosenkraenzer <bero@redhat.com>8��@- It's /usr/bin/killall, not /usr/sbin/killall (Bug #8063)���L]�Y �Bernhard Rosenkraenzer <bero@redhat.com>8�@- Fix up location of named-bootconf.pl and make it executable (Bug #8028) - bind-devel requires bindG��K]5 �Bernhard Rosenkraenzer <bero@redhat.com>8/��- update to 8.2.2-P5C��JU5 �Bill Nottingham <notting@redhat.com>8)^@- update to 8.2.2-P3���IS�K �Cristian Gafton <gafton@redhat.com>8"�- add patch to stop a cache only server from complaining about lame servers on every request.�?��HO�1 �Preston Brown <pbrown@redhat.com>7�g�- use real stop and start in named.init for restart, not ndc restart, it has problems when named has changed during a package update... (# 4890)W��GU] �Bill Nottingham <notting@redhat.com>7��- chkconfig --del in %preun, not %postunC��FU5 �Bill Nottingham <notting@redhat.com>7��@- initscript munginga��EUq �Bill Nottingham <notting@redhat.com>7�M�- fix installed chkconfig links to match init filec��DG� �Jeff Johnson <jbj@redhat.com>7}�@- conflict with new (in man-1.24) man pages (#3876,#3877).T��CUW �Bill Nottingham <notting@redhat.com>7x�@- fix named.logrotate (wrong %SOURCE)� ��BG�w �Jeff Johnson <jbj@redhat.com>7so@- update to 8.2.1. - add named.logrotate (#3571). - hack around egcs-1.1.2 -m486 bug (#3413, #3485). - vet file list.E��AU9 �Bill Nottingham <notting@redhat.com>7j4�- don't run by default " b i+� � � 7 � � � t 4 � t 0�I�~�9��5�4_�o � b b��yO �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.1;=�- 9.1.3rc1 - s/Copyright/License/�"��m�Y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1:��@- 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for the version number, though.K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-0.rc1.1:�H@- 9.1.2rc1B��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.1-1:�#�- 9.1.1W��oC �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-10:���- Merge fixes from 9.1.1rc5�P�� m�5 �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9:�h�- Work around bind 8 -> bind 9 migration problem when using buggy zone files: accept zones without a TTL, but spew out a big fat warning. (#31393)G��]5 �Bernhard Rosenkraenzer <bero@redhat.com>:�t@- Add fixes from rc4I��~QE �Nalin Dahyabhai <nalin@redhat.com>:��@- rebuild in new environmente��}]q �Bernhard Rosenkraenzer <bero@redhat.com>:�9�- killall -HUP named if rndc reload fails (#30113)S��|]M �Bernhard Rosenkraenzer <bero@redhat.com>:���- Merge some fixes from 9.1.1rc3�u��{]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\A- Don't use the standard rndc key from the documentation, instead, create a random one at installation time (#26358) - Make /etc/rndc.conf readable by user named only, it contains secret keys�.��z]� �Bernhard Rosenkraenzer <bero@redhat.com>:�\@- 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes from 9.1.1rc2 - bind requires bind-utils (#28317)x��y]� �Bernhard Rosenkraenzer <bero@redhat.com>:�!�- Update to rc2, fixes 2 more bugs - Fix build with glibc >= 2.2.1-7�D��x]�- �Bernhard Rosenkraenzer <bero@redhat.com>:��@- Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us; 1 was fixed in a Red Hat patch already, 2 others are portability improvements)a��w]i �Bernhard Rosenkraenzer <bero@redhat.com>:�8�- Remove initscripts 5.54 requirement (#26489)b��v]k �Bernhard Rosenkraenzer <bero@redhat.com>:u[A- Add named-checkconf, named-checkzone (#25170)H��uY; �Trond Eivind Glomsrod <teg@redhat.com>:u[@- use echo, not gprintf���t]�Q �Bernhard Rosenkraenzer <bero@redhat.com>:n�- Fix problems with $GENERATE Patch from Daniel Roesen <droesen@entire-systems.com> Bug #24890@��s]' �Bernhard Rosenkraenzer <bero@redhat.com>:f�- 9.1.0 finalq��r]� �Bernhard Rosenkraenzer <bero@redhat.com>:`C@- 9.1.0rc1 - i18nify init script - bzip2 source to save spaceG��q]5 �Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Fix %postun script<��p] �Bernhard Rosenkraenzer <bero@redhat.com>:Z�@- 9.1.0b3`��o]g �Bernhard Rosenkraenzer <bero@redhat.com>:Y��- Add named.conf man page from bind8 (#23503)�)��n]�w �Bernhard Rosenkraenzer <bero@redhat.com>:XZA- Make /etc/rndc.conf and /etc/sysconfig/named noreplace - Make devel require bind = %{version} rather than just bindM��m]A �Bernhard Rosenkraenzer <bero@redhat.com>:XZ@- Fix init script for real\��l]_ �Bernhard Rosenkraenzer <bero@redhat.com>:W�- Fix init script when ROOTDIR is not set���k]�/ �Bernhard Rosenkraenzer <bero@redhat.com>:Te�- Add hooks for setting up named to run chroot (RFE #23246) - Fix up requirements<��j] �Bernhard Rosenkraenzer <bero@redhat.com>:L|�- 9.1.0b2� ��i]�a �Bernhard Rosenkraenzer <bero@redhat.com>:@�@- Move run files to /var/run/named/ - /var/run isn't writable by the user we're running as. (Bug #20665)p��h]� �Bernhard Rosenkraenzer <bero@redhat.com>:?M�- Fix reverse lookups (#22272) - Run ldconfig in %post utils�#��gM�{ �Karsten Hopp <karsten@redhat.de>:6@- fixed logrotate script (wrong path to kill) - include header files in -devel package - bugzilla #22049, #19147, 21606g��f]u �Bernhard Rosenkraenzer <bero@redhat.com>:0�@- 9.1.0b1 (9.1.0 is in our timeframe and less buggy):��e] �Bernhard Rosenkraenzer <bero@redhat.com>:�- 9.0.1���d]�I �Bernhard Rosenkraenzer <bero@redhat.com>9�b�- Fix initscript (Bug #19956) - Add sample rndc.conf (Bug #19956) - Fix build with tar 1.13.18 � 5�e � ~ * � a � � k�-�h��L�@�L�Q� G��!m% �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-5= �- Fix #65975:�� E3 �Tim Powers <timp@redhat.com>=@- automated rebuild:�� E3 �Tim Powers <timp@redhat.com><��- automated rebuild�8�� m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2<�d�- Move libisccc, lib isccfg and liblwres from bind-utils to bind, they're not required if you aren't running a nameserver.P�� e? �Florian La Roche <Florian.LaRoche@redhat.de><�{�- update to 9.2.1 releasec�� m] �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-8<���- Merge 30+ bug fixes from 9.2.1rc1 code�4��m�} �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7<��@- Don't exit if /etc/named.conf doesn't exist if we're running chroot (#60868) - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders versions or bug #58335 will be back. "It compiles, therefore it works" isn't always true.���[�M �Elliot Lee <sopwith@redhat.com> 9.2.0-6<~�- Fix BuildRequires (we don't need specific glibc/glibc-kernheaders versions). - Use _smp_mflagsp��mw �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-4<s��- rebuild, require recent autoconf, automake (#58335)C��EE �Tim Powers <timp@redhat.com><QH�- rebuild against new libssl:��E3 �Tim Powers <timp@redhat.com><<0�- automated rebuildB��m �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-1<�@- 9.2.0M��{# �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc10.2;��- 9.2.0rc10\��yC �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.2;�@- Fix up rndc.conf (#55574)a��yM �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc8.1;��- rc8 - Enforce --enable-threads�%��y�S �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc7.1;� @- 9.2.0rc7 - Use rndc status for "service named status", it's supposed to actually work in 9.2.x.���y�' �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc5.1;���- 9.2.0rc5 - Fix rpm --rebuild with ancient libtool versions (#53938, #54257)K��y! �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc4.1;�q�- 9.2.0rc4�u��y�s �Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1;��@- 9.2.0rc3 - remove ttl patch, I don't think we need this for 8.0. - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page - add lwres* man pages to -devel�(��m�e �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4;�p�- Make sure /etc/rndc.conf isn't world-readable even after the %post script inserted a random key (#53009)�J�� m�) �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3;V�- Add build dependencies (#49368) - Make sure running service named start several times doesn't create useless processes (#47596) - Work around the named parent process returning 0 even if the config file is broken (it's parsed later by the child processes) (#45484)v�� m� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-2;R�@- Don't use rndc status, it's not yet implemented (#48839)P�� e? �Florian La Roche <Florian.LaRoche@redhat.de>;HK@- update to 9.1.3 releasez�� y �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc3.1;A��- Fix up rndc configuration and improve security (#46586)e�� yU �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.2;8y@- Sync with caching-nameserver-7.1-6P��y+ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc2.1;7'�- Update to rc2x��y{ �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.3;��- Remove resolv.conf(5) man page, it's now in man-pages�F��y� �Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2;2@- Add named.conf man page from bind 8.x (outdated, but better than nothing, - Rename the rndc key (#42895) - Add dnssec* man pages $ p � J � � / - � U ! � m %�r%�b�d� ��3�s#�^�K � p l��Ecy �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-3?|@- Stop hammering stuff on update of chroot environmentg��Dco �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-2?x �- Fix chroot directory to grab all subdirectoriesb��Cce �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-1?q�@- New patch to support for "delegation-only"Y��B_W �Daniel Walsh <dwalsh@redhat.com> 9.2.2-23?hL�- patch support for "delegation-only"L��A_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-22?'�A- Update to build on RHLl��@_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-21?'�@- Install libraries as exec so debug info will be pulledQ��?_G �Daniel Walsh <dwalsh@redhat.com> 9.2.2-20?2�- Remove BSDCOMPAT (BZ 99454)L��>_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-19?�- Update to build on RHLl��=_} �Daniel Walsh <dwalsh@redhat.com> 9.2.2-18?�- Change protections on /var/named and /var/chroot/namedL��<_= �Daniel Walsh <dwalsh@redhat.com> 9.2.2-17>��- Update to build on RHLM��;_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-16>��- Update to build on RHEL3��:K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltM��9_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-14>�.�- Update to build on RHEL�1��8_� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-13>�.�- Fix config description of named.conf in chroot - Change named.init script to check for existence of /etc/sysconfig/networkM��7_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-12>���- Update to build on RHELM��6_? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-11>��- Update to build on RHEL^��5_a �Daniel Walsh <dwalsh@redhat.com> 9.2.2-10>��- Fix echo OK on starting/stopping serviceL��4]? �Daniel Walsh <dwalsh@redhat.com> 9.2.2-9>�9A- Update to build on RHELH��3]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-8>�9@- Fix echo on startupt��2]� �Daniel Walsh <dwalsh@redhat.com> 9.2.2-7>�D�- Fix problems with chroot environment - Eliminate posix threadsG��1]5 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-6>~�@- Fix build problemsI��0]9 �Daniel Walsh <dwalsh@redhat.com> 9.2.2-5>q�@- Fix build on beehiveJ��/]; �Daniel Walsh <dwalsh@redhat.com> 9.2.2-4>pr�- build bind-chroot kita��.]i �Daniel Walsh <dwalsh@redhat.com> 9.2.2-3>m�- Change configure to use proper threads modelD��-]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-2>h��- update to 9.2.2D��,]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2-1>d�@- update to 9.2.2h��+_u �Daniel Walsh <dwalsh@redhat.com> 9.2.1-16>1*�- Put a sleep in restart to make sure stop completes0��*E �Tim Powers <timp@redhat.com>>.��- rebuilt]��)__ �Daniel Walsh <dwalsh@redhat.com> 9.2.1-14>�A- Separate /etc/rndc.key to separate files��(c� �Nalin Dahyabhai <nalin@redhat.com> 9.2.1-13>�@- Use openssl's pkgconfig data, if available, at build-time.�}��'_� �Daniel Walsh <dwalsh@redhat.com> 9.2.1-12>o�- Fix log rotate to use service named reload - Change service named reload to give success/failure message [73770] - Fix File checking [75710] - Begin change to automatically run in CHROOT environmenta��&_g �Daniel Walsh <dwalsh@redhat.com> 9.2.1-10>L@- Fix startup script to work like all others._��%]e �Daniel Walsh <dwalsh@redhat.com> 9.2.1-9=��@- Fix configure to build on x86_64 platformsO��$MU �Karsten Hopp <karsten@redhat.de>=Q �- fix #70583, doesn't build on IA64V��#]S �Karsten Hopp <karsten@redhat.de> 9.2.1-8=F�- bind-utils shouldn't require bind�W��"]�S �Karsten Hopp <karsten@redhat.de> 9.2.1-7=;�- fix name of pidfine in logrotate script (#68842) - fix owner of logfile in logrotate script (#41391) - fix nslookup and named.conf man pages (output on stderr) (#63553, #63560, #63561, #54889, #57457) - add rfc1912 (#50005) - gzip all rfc's - fix typo in keygen.c (#54870) - added missing manpages (#64065) - shutdown named properly with rndc stop (#62492) - /sbin/nologin instead of /bin/false (#68607) - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381) - don't kill initscript when rndc fails (reload) (#58750) & � �\�> � � F � � ` ) � � . � � � 8����<�B�����Q�sP � ���kQ�U �Jason Vas Dias <jvdias@redhat.com>A-�- Fix bug 130981: add '-t' option to named-checkconf invocation in - named.init if chroot installed.� ��jQ�m �Jason Vas Dias <jvdias@redhat.com>A,@- Remove resolver(5) manpage now in man-pages (bug 130792); - Don't create /dev/ entries in bind-chroot if already there (bug 127556); - fix bind-devel Requires (bug 130919) - Set default location for dumpdb & stats files to /var/named/data^��iQo �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix devel Requires for bug 130738 & fix versionx��hQ�! �Jason Vas Dias <jvdias@redhat.com>A+-�- Fix errors on clean install if named group does not exist - (bug 130777)r��gQ� �Jason Vas Dias <jvdias@redhat.com>A$�@- Upgrade to bind-9.2.4rc7; applied initscript fix - for bug 102035.�N��fQ�M �Jason Vas Dias <jvdias@redhat.com>Ag@- Fixed bug 129289: bind-chroot install / deinstall - on install, existing config files 'safe_replace'd - with links to chroot copies; on uninstall, moved back.a��eQu �Jason Vas Dias <jvdias@redhat.com>Ar�- Fixed bug 129258: "${prefix}/var/tmp" typo in spec���dQ�5 �Jason Vas Dias <jvdias@redhat.com>A�@- Fixed bug 127124 : 'Requires: kernel >= 2.4' - causes problems with Linux VServerse��cQ} �Jason Vas Dias <jvdias@redhat.com>AC�- Fixed bug 127555 : chroot tar missing var/named/slavesO��bQQ �Jason Vas Dias <jvdias@redhat.com>@��A- Upgraded to ISC version 9.2.4rc6�&��aQ�} �Jason Vas Dias <jvdias@redhat.com>@��@- Fixed named.init generation of error messages on - 'service named stop' and 'service named reload' - as per bug 127775K��`_; �Daniel Walsh <dwalsh@redhat.com> 9.2.3-19@�p�- Bump for rhel 3.0 U3O��__C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-18@�p�- remove disable-linux-capsQ��^_G �Daniel Walsh <dwalsh@redhat.com> 9.2.3-17@�6@- Update RHEL3 to latest bind3��]K �Elliot Lee <sopwith@redhat.com>@��- rebuiltr��\_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-15@Ū@- Remove device files from chroot, Named uses the system oneO��[_C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-14@dA- Move RFC to devel packageP��Z_E �Daniel Walsh <dwalsh@redhat.com> 9.2.3-13@d@- Fix location of restoreconq��Y_� �Daniel Walsh <dwalsh@redhat.com> 9.2.3-12@b�- Tighten security on config files. Should be owned by root]��X__ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-11@b�- Update key patch to include conf-keygen���W_�1 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-10@`&�- fix chroot to only happen once. - fix init script to do kill insteall of killallY��V]Y �Daniel Walsh <dwalsh@redhat.com> 9.2.3-9@U��- Add fix for SELinux security context3��UK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuiltU��TeI �Florian La Roche <Florian.LaRoche@redhat.de>@@��- run ldconfig for libs subrpmX��SGm �Tim Waugh <twaugh@redhat.com>@9�@- Use ':' instead of '.' as separator for chown.B��R]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-7@2@- Add COPYRIGHT3��QK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltH��P]7 �Daniel Walsh <dwalsh@redhat.com> 9.2.3-5?�h�- Add defattr to libsN��O]C �Daniel Walsh <dwalsh@redhat.com> 9.2.3-4?�@- Break out library packageD��N]/ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-3?��- Fix condrestartb��M]k �Daniel Walsh <dwalsh@redhat.com> 9.2.3-2?� �- Move libisc and libdns to bind from bind-utilB��L]+ �Daniel Walsh <dwalsh@redhat.com> 9.2.3-1?��@- Move to 9.2.3H��Ke/ �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-10?��- Add PIE supportW��JcO �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-9?��- Add /var/named/slaves directoryi��Ieq �Florian La Roche <Florian.LaRoche@redhat.de>?�B@- do not link against libnsl, not needed for LinuxR��HcE �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-6?��@- Fix local time in log fileA��Gc# �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-5?���- Try again[��FcW �Daniel Walsh <dwalsh@redhat.com> 9.2.2.P3-4?�Y@- Fix handling of chroot -/dev/random � � � . � � C�4���} ��vL � �,��~u�e �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbusB�9�- Enhancement to allow dynamic forwarder table management and - DHCP forwarder auto-configuration with D-BUS�%��}s�Y �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4B^[@- Rebuild for bind-sdb libpq.so.3 dependency - fix bug 150981: don't install libbind man-pages if no libbind - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...) to work and correct number of CPUs to be determinedz��|s� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4B1�@- Upgrade to ISC BIND 9.3.1 (final release) released today.�-��{q�k �Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5B.�@- fix bug 150288: h_errno not being accessed / set correctly in libbind - add libbind man-pages from bind-8.4.6b��zqW �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4B,B@- Rebuild with gcc4 / glibc-2.3.4-14.m��yqm �Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3B$Y@- configure with --with-pic to get PIC librariesg��xqa �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2B{�- fix bug 149183: don't use getifaddrs() .�2��wq�u �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1B5�- Upgrade to 9.3.1rc1 - Add Simplified Database Backend (SDB) sub-package ( bind-sdb ) - add named_sdb - ldap + pgsql + dir database backend support with - 'ENABLE_SDB' named.sysconfig option - Add BIND resolver library & includes sub-package ( libbind-devel) - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init - fix bug 146084 : shutup restorecon���vk�= �Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2A�- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named - based on 'named_write_master_zones' SELinux boolean. - Fix bug 143744: dig & nsupdate IPv6 timeout (dup of 140528)y��ue� �Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1A�A- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)�8��tk� �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4A�@- Fix bugs 140528 and 141113: - 2 second timeouts when IPv6 not configured and root nameserver's - AAAA addresses are queried�M��sk�1 �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2As�@- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix} - Fix bug 135175: named.init must return non-zero if named is not run - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named - Fix bug 133423: bind-chroot %files entries should have been %dirs�1��rk�y �Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1AR��- BIND 9.2.4 (final release) released - source code actually - identical to 9.2.4rc8, with only version number change.�.��qs�k �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�A- Upgrade to upstream bind-9.2.4rc8 . - Progress: Finally! Hooray! ISC bind now distributes: - o named.conf(5) and nslookup(8) manpages - 'bind-manpages.bz2' source can now disappear - (could this have something to do with ISC bug I raised about this?) - o 'deprecation_msg' global has vanished - bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear~��ps� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14AN�@- Fix bug 106572/132385: copy /etc/localtime to chroot on start�*��o{�[ �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3AA�@- Fix bug 132303: if ROOTDIR line was replaced after upgrade from - bind-chroot-9.2.2-21, restart named�D��n{� �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3A>�@- Fix bug 131803: replace ROOTDIR line removed by broken - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chrootg��m{W �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3A=��- Fix bugs 130121 & 130981 for RHEL-3�j��ls�c �Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10A3�- Fix bug 130121: add '%ghost' entries for files included in previous - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - - that RPM removed after upgrade . 2 � � � bX�FP�M;|(dr � 2 � ��o�S �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc-1C�7@- Upgrade to upstream version 9.3.2rc1 - fix namedSetForwarders -> namedGetForwarders SOURCE14 typo���m�A �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-26C��- rebuild for new dbus 0.6 dependency; remove use of DBUS_NAME_FLAG_PROHIBIT_REPLACEMENT�m��m�o �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24C�Y�- allow D-BUS support to work in bind-chroot environment: workaround latest selinux policy by mounting /var/run/dbus/ under chroot instead of /var/run/dbus/system-bus-socket�?�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22Cw*�- fix bug 172632 - remove .la files - ship namedGetForwarders and namedSetForwarders scripts - fix detection of -D option in chrootP�� cA �Tomas Mraz <tmraz@redhat.com> - 24:9.3.1-21Cp�@- rebuilt with new openssl�:�� m� �Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20CV5@- Allow the -D enable D-BUS option to be used within bind-chroot . - fix bug 171226: supply some documentation for pgsql SDB .� �� m�/ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18CE�- fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() - task->state != task_ready and will cause Abort in task.c if process is waiting for NameOwnerChanged to do a SetForwardersy�� m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-16CC�@- Fix reconnecting to dbus-daemon after it stops & restarts .���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-14C94@- When forwarder nameservers are changed with D-BUS, flush the cache.�q��m�w �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12C7�- fix bug 168302: use %{__cc} for compiling dns-keygen - fix bug 167682: bind-chroot directory permissions - fix issues with -D dbus option when dbus service not running or disabled~��m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12CJ@- fix bug 167062: named should be started after syslogd by default� ��m�+ �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-11C �@- fix bug 166227: host: don't do default AAAA and MX lookups with '-t a' option���m� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10C�@- Build with D-BUS patch by default; D-BUS support enabled with named -D option - Enable D-BUS for named_sdb also - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create() - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server - fix named.init script to handle named_sdb properly - fix named.init script checkconfig() to handle named '-c' option and make configtest, test, check configcheck synonymsx��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8B��@- fix named.init script bugs 163598, 163409, 151852(addendum)�`��k�W �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7BӰ�- fix bug 160914: resolver utilities should try next server on empty referral (now that glibc bug 162625 is fixed) host and nslookup now by default try next server on SERVFAIL (host now has '-s' option to disable, and nslookup given '[no]fail' option similar to dig's [no]fail option). - rebuild and re-test with new glibc & gcc (all tests passed).�z��k� �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6B�Q�- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf files and not use uninitialized garbage nameserver values (ISC bug 14841 raised).L�� s) �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4B��- Fix SDB LDAP�i��k�i �Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4B��@- Fix bug 157601: give named.init a configtest function - Fix bug 156797: named.init should check SELinux booleans.local before booleans - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat BIND quirks and SELinux DDNS / slave zone file configuration - D-BUS patches NOT applied until dhcdbd is in FC � �>�D � q � S d �s��?���3� y��$m� �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-24.FC6D���- and actually put the devel symlinks in the right subpackageT��#m? �Jeremy Katz <katzj@redhat.com> - 30:9.3.2-23.FC6Du�@- rebuild for -devel deps�"��"m�Y �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22DD�- apply upstream patch for ncache_adderesult segfault bug 173961 addenda - fix bug 188382: rpm --verify permissions inconsistencies - fix bug 189186: use /sbin/service instead of initscript - rebuild for new gcc, glibc-kernheaders�}��!m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20D2_�- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 (upstream bugs #15642, #15528 ?) - allow named ability to generate core dumps after setuid (upstream bug #15753)��� m�! �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18D1@- fix bug 187529: make bind-chroot-admin deal with subdirectories properly�(�� m�e �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16D+�@- fix bug 187286: prevent host(1) printing duplicate 'is an alias for' messages for the default AAAA and MX lookups as well as for the A lookup (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups). This is upstream bug #15702 fixed in the unreleased bind-9.3.3 - fix bug 187333: fix SOURCE24 and SOURCE25 transposition�s�� m�{ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14D*v�- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup - add '%doc' sample configuration files in /usr/share/doc/bind*/sample - rebuild with new gcc and glibc� �� m�) �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12D!<@- fix typo in initscript - fix Requires(post): policycoreutils in sub-packagesd�� m_ �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10D �@- fix bug 185969: more .spec file cleanup�#��k�] �Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8D�@- Do not allow package to be installed if named:25 userid creation fails - Give libbind a pkg-config file - remove restorecon from bind-chroot-admin (not required). - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)]��kS �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7D u�- fix issues with bind-chroot-admin�j��k�k �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6D $@- replace caching-nameserver with bind-config sub-package - fix bug 177595: handle case where $ROOTDIR is a link in initscript - fix bug 177001: bind-config creates symlinks OK now - fix bug 176388: named.conf is now never replaced by any RPM - fix bug 176248: remove unecessary creation of rpmsave links - fix bug 174925: no replacement of named.conf - fix bug 173963: existing named.conf never modified - major .spec file cleanuph��qc �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1C�@- bump again for double-long bug on ppc(64)�-��k�q �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4C�- regenerate redhat_doc patch for non-DBUS builds - allow dbus builds to work with dbus version < 0.6 (bz #179816)`��mW �Florian La Roche <laroche@redhat.com> 30:9.3.2-3C�- try supporting without dbus supportk��ok �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1C�:@- Rebuild for new gcc, glibc, glibc-kernheaders���k�A �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2Cˊ�- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+ /proc/net/if_inet6 format\��kQ �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1C�C�- Upgrade to 9.3.2, released today���q� �Jason Vas Dias <jvdias@redhat.com> - 28:9.3.2rc1-2C��@- fix bug 176100: do not Require: perl just for namedGetForwarders !7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt ? � f �4�<�R�.��-�Z � ? � ��8q�% �Martin Stransky <stransky@redhat.com> - 30:9.3.3-5E/�- fix for #209359: bind-libs from compatlayer CD will not install on ia64���7q� �Martin Stransky <stransky@redhat.com> - 30:9.3.3-4E+�@- added fix for #210096: warning: group named does not exist - using root�2��6q�u �Martin Stransky <stransky@redhat.com> - 30:9.3.3-3E$�- added fix from #209400 - Bind Init Script does not create the PID file always, created by Jeff Means - added timeout to stop section of init script. The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT shell variable.���5q�? �Martin Stransky <stransky@redhat.com> - 30:9.3.3-2E �@- removed chcon from %post script, replaced by restorecon (Bug 202547, comment no. 37)h��4qc �Martin Stransky <stransky@redhat.com> - 30:9.3.3-1E ��- updated to the latest upstream (9.3.3rc2)~��3s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-41D��@- added upstream patch for correct SIG handling - CVE-2006-4095� ��2s�) �Martin Stransky <stransky@redhat.com> - 30:9.3.2-40D�f�- suppressed messages from bind-chroot-admin - cleared notes about bind-config}��1s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-39D��- added fix for #203522 - "bind-chroot-admin -e" command fails_��0sO �Martin Stransky <stransky@redhat.com> - 30:9.3.2-38D�@- fix for #203194 - tmpfile usage�<��/s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-37D�Z@- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory - fix for #202547 - file_contexts: invalid context[��.sG �Martin Stransky <stransky@redhat.com> - 30:9.3.2-36D�qA- added Provides: bind-config���-s� �Martin Stransky <stransky@redhat.com> - 30:9.3.2-35D�q@- fix bug 197493: renaming subpackage bind-config to caching-nameserver���,m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-34DĶA- fix bug 199876: make '%exclude libbbind.*' conditional on %{LIBBIND}m��+sk �Florian La Roche <laroche@redhat.com> - 30:9.3.2-33DĶ@- fix #195881, perms are not packaged correctly�7��*m� �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32D���- fix addenda to bug 189789: determination of selinux enabled was still not 100% correct in bind-chroot-admin - fix addenda to bug 196398: make named.init test for NetworkManager being enabled AFTER testing for -D absence; named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable auto-enable of named dbus support if NetworkManager enabled.���)m�9 �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30D� �- fix bug 196398 - Enable -D option automatically in initscript if NetworkManager enabled in any runlevel. - fix namedGetForwarders for new dbus - fix bug 195881 - libbind.so should be owned by bind-libbind-devel[��(yA �Matthias Clasen <mclasen@redhat.com> - 30:9.3.2-28.FC6D� �- Rebuild against new dbuse��'uY �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-27.FC6D��A- rebuild with fixed glibc-kernheadersK��&{ �Jesse Keating <jkeating@redhat.com> - 30:9.3.2-26.FC6.1D��@- rebuild�]��%u�G �Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6D��@- fix bugs 191093, 189789 - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version: ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): o change 2024 / bug 16027: named emitted spurious "zone serial unchanged" messages on reload o change 2013 / bug 15941: handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully o change 2009 / bug 15808: coverity fixes o change 1997 / bug 15818: named was failing to replace negative cache entries when a positive one for the type was learnt o change 1994 / bug 15694: OpenSSL 0.9.8 support o change 1991 / bug 15813: The configuration data, once read, should be treated as readonly. o misc. validator fixes o misc. resolver fixes o misc. dns fixes o misc. isc fixes o misc. libbind fixes o misc. isccfg fix o misc. lwres fix o misc. named fixes o misc. dig fixes o misc. nsupdate fix o misc. tests fixes � Y � [ � B � #�*\�P����}�B � ���Lc�- �Adam Tkac <atkac redhat com> 31:9.4.0-6.fc7F#e@- added idn support (still under development with upstream, disabled by default)o��Kc �Adam Tkac <atkac redhat com> 31:9.4.0-5.fc7F �- dnssec-signzone utility now doesn't ignore -d parameter�C��Jc�% �Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7F|@- removed query-source[-v6] options from caching-nameserver config (#209954, increase security) - throw away idn. It won't be ready in fc7�-��Ic�y �Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7E��@- prepared bind to merge review - added experimental idn support to bind-utils utils (not enabled by default yet) - change chroot policy in caching-nameserver post section - fixed bug in bind-chroot-admin - rootdir function is called properly now�u��Hc� �Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7E�@�- added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>) - moved bind-chroot-admin script to chroot package - bind-9.3.2-redhat_doc.patch is always applied (#231738)�R��Gc�C �Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7E�W�- updated to 9.4.0 - bind-chroot-admin now sets EAs correctly (#213926) - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)a��Fcc �Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7E�K@- minor cleanup in bind-chroot-admin scriptg��Eco �Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7E�b@- fixed broken bind-chroot-admin script (#227995)q��Dc� �Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7Eɿ@- bind-chroot-admin now uses correct chroot path (#227600)���Cc�C �Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7E� @- fixed conflict between bind-sdb and ldap - removed duplicated bind directory in bind-libs�I��Bc�1 �Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7E��@- fixed building without libbind - fixed post section (selinux commands is now in if-endif statement) - prever macro has been removed from version��Ac� �Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7E��- redirected output from bind-chroot prep and %preun stages to /dev/nullr��@c� �Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7E���- updated to version 9.3.4 which contains security bugfixesn��?c} �Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7E���- package bind-libbind-devel has been marked as obsolete�(��>c�o �Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7E��@- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs) - Resolves: #214208n��=qo �Martin Stransky <stransky@redhat.com> - 31:9.3.3-3E��@- fixed a multi-lib issue - Resolves: rhbz#222717�"��<q�U �Martin Stransky <stransky@redhat.com> - 31:9.3.3-2E��@- added namedGetForwarders written in shell (#176100), created by Baris Cicek <baris@nerd.com.tr>.���;q� �Martin Stransky <stransky@redhat.com> - 31:9.3.3-1E{��- update to 9.3.3 final - fix for #219069: file included twice in src.rpm�m��:}�_ �Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3Ev��- added back an interval to restart - renamed package, it should meet the N-V-R criteria - fix for #216185: bind-chroot-admin able to change root mode 750 - added fix from #215997: incorrect permissions on dnszone.schema - added a notice to init script when /etc/named.conf doesn't exist (#216075)�"��9q�U �Martin Stransky <stransky@redhat.com> - 30:9.3.3-6EE�@- fix for #200465: named-checkzone and co. cannot be run as non-root user - fix for #212348: chroot'd named causes df permission denied error - fix for #211249, #211083 - problems with stopping named - fix for #212549: init script does not unmount /proc filesystem - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1, added edns-enable options to named configuration file which can suppress EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options) - fix for #212961: bind-chroot doesn't clean up its mess on %preun - update to 9.3.3rc3, removed already merged patches � � � C � j ���>e�c��M�>�6 � �-��aa�{ �Adam Tkac <atkac redhat com> 32:9.5.0-8.a6F��- minor next improvements on autotools patch - dig and host utilities now using libidn instead idnkit for IDN support_��`mU �Warren Togami <wtogami@redhat.com> 32:9.5.0-7.a6F�;@- binutils/gcc bug rebuild (#249435)� ��_a�a �Adam Tkac <atkac redhat com> 32:9.5.0-6.a6F��- updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and CVE-2007-2926 - fixed building on 64bits�#��^_�i �Adam Tkac <atkac redhat com> 31:9.5.0a5-5F��A- integrated "autotools" patch for testing purposes (upstream will accept it in future, for easier building)c��]cg �Adam Tkac <atkac redhat com> 31:9.5.0a5-4.1F��@- fixed DLZ drivers building on 64bit systemsk��\_{ �Adam Tkac <atkac redhat com> 31:9.5.0a5-4F���- fixed relation between logrotated and chroot-ed named�,��[c�w �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9F� �- removed bind-sdb package (default named has compiled SDB backend now) - integrated DLZ (Dynamically loadable zones) drivers - integrated GSS-TSIG support (RFC 3645) - build with -O0 (many new features, potential core dumps will be more useful)r��Zc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-3.2F��A- initscript should be ready for parallel booting (#246878)���Y_�1 �Adam Tkac <atkac redhat com> 31:9.5.0a5-3F��@- handle integer overflow in isc_time_secondsastimet function gracefully (#247856)r��Xc� �Adam Tkac <atkac redhat com> 31:9.5.0a5-2.2F�]�- moved chroot configfiles into chroot subpackage (#248306)�T��W_�K �Adam Tkac <atkac redhat com> 31:9.5.0a5-2F��- minor changes in default configuration - fix h_errno assigment during resolver initialization (unbounded recursion, #245857) - removed wrong patch to #150288P��V_E �Adam Tkac <atkac redhat com> 31:9.5.0a5-1Fw�@- updated to latest upstream�H��U[�7 �Adam Tkac <atkac redhat com> 31:9.4.1-7Fo�@- marked caching-nameserver as obsolete (#244604) - fixed typo in initscript (causes that named doesn't detect NetworkManager correctly) - next cleanup in configuration - moved configfiles into config.tar - removed delay between start & stop in restart function in named.init���T[�5 �Adam Tkac <atkac redhat com> 31:9.4.1-6Fn��- major changes in initscript. Could be LSB compatible now - removed caching-nameserver subpackage. Move configs from this package to main bind package as default configuration and major configuration cleanup�z��S[� �Adam Tkac <atkac redhat com> 31:9.4.1-5Fc��- very minor compatibility change in bind-chroot-admin (line 215) - enabled IDN support by default and don't distribute IDN libraries - specfile cleanup - add dynamic directory to /var/named. This directory will be primarily used for dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist�&��R[�s �Adam Tkac <atkac redhat com> 31:9.4.1-4FU~@- removed ldap-api patch and start using deprecated API - fixed minor problem in bind-chroot-admin script (#241103)�O��Q[�E �Adam Tkac <atkac redhat com> 31:9.4.1-3FR�@- fixed bind-chroot-admin dynamic DNS handling (#239149) - updated zone-freeze patch to latest upstream - ldap sdb has been rewriten to latest api (#239802)V��PcM �Adam Tkac <atkac redhat com> 31:9.4.1-2.fc7F?�- test build on new build systeml��Ocy �Adam Tkac <atkac redhat com> 31:9.4.1-1.fc7F8}@- updated to 9.4.1 which contains fix to CVE-2007-2241�1��Nc� �Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7F1�- improved "zone freeze patch" - if multiple zone with same name exists no zone is freezed - minor cleanup in caching-nameserver's config file - fixed race-condition in dbus code (#235809) - added forgotten restorecon statement in bind-chroot-admin���Mc�C �Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7F$��- removed DEBUGINFO option because with this option (default) was bind builded with -O0 and without this flag no debuginfo package was produced. (I want faster bind => -O2 + debuginfo) - fixed zone finding (#236426) � �8� G F � � M� v��;�3�}(�� �9 � ���|g�7 �Adam Tkac <atkac redhat com> 32:9.5.0-18.3.a7GJ�@- removed edns patch to keep compatibility with vanilla bind (#275091, comment #20)j��{gq �Adam Tkac <atkac redhat com> 32:9.5.0-18.2.a7GD �- use system port selector instead ISC's (#391931)s��zc� �Adam Tkac <atkac redhat com> 32:9.5.0-18.a7GAz�- removed statement from initscript which passes -D to named�5��yc� �Adam Tkac <atkac redhat com> 32:9.5.0-17.a7G<4�- 9.5.0a7 - dropped patches (upstream) - bind-9.5-update.patch - bind-9.5-pool_badfree.patch - bind-9.5-_res_errno.patch�.��xg�w �Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6G<4�- added bind-sdb again, contains SDB modules and DLZ modules - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch���wg�K �Adam Tkac <atkac redhat com> 32:9.5.0-16.4.a6G8@@- removed Requires: openldap, postgresql, mysql, db4, unixODBC - new L.ROOT-SERVERS.NET addressQ��vg? �Adam Tkac <atkac redhat com> 32:9.5.0-16.3.a6G%�@- completely disable DBUS\��ugU �Adam Tkac <atkac redhat com> 32:9.5.0-16.2.a6G!�- minor cleanup in bind-chroot-adminR��tgA �Adam Tkac <atkac redhat com> 32:9.5.0-16.1.a6G �@- fixed typo in initscriptf��scm �Adam Tkac <atkac redhat com> 32:9.5.0-16.a6G �@- disabled DBUS (dhcdbd doesn't exist & #339191)���rg�M �Adam Tkac <atkac redhat com> 32:9.5.0-15.1.a6GJ�- fixed missing va_end () functions (#336601) - fixed memory leak when dbus initialization failsa��qcc �Adam Tkac <atkac redhat com> 32:9.5.0-15.a6G��- corrected named.5 SDB statement (#326051)X��pcQ �Adam Tkac <atkac redhat com> 32:9.5.0-14.a6F���- added edns patch again (#275091)v��oc� �Adam Tkac <atkac redhat com> 32:9.5.0-13.a6F���- removed bind-9.3.3-edns.patch patch (see #275091 for reasons)���ng�9 �Adam Tkac <atkac redhat com> 32:9.5.0-12.4.a6F�`�- build with O2 - removed "autotools" patch - bugfixing in bind-chroot-admin (#279901)�(��mc�o �Adam Tkac <atkac redhat com> 32:9.5.0-12.a6F��- bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are obsoleted by upstream bind-9.5-_res_errno.patch���lg�= �Adam Tkac <atkac redhat com> 32:9.5.0-11.9.a6FޚA- fixed wrong resolver's dispatch pool cleanup (#275011, patch from tmraz redhat com)�'��kg�i �Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6Fޚ@- initscript failure message is now printed correctly (#277981, Quentin Armitage (quentin armitage org uk) )� ��jg�1 �Adam Tkac <atkac redhat com> 32:9.5.0-11.2.a6F�@- temporary revert ISC 2119 change and add "libbind-errno" patch (#254501) again�8��ig� �Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6F�v�- removed end dots from Summary sections (skasal@redhat.com) - fixed wrong file creation by autotools patch (skasal@redhat.com)�9��hc� �Adam Tkac <atkac redhat com> 32:9.5.0-11.a6F�v�- start using --disable-isc-spnego configure option - remove bind-9.5-spnego-memory_management.patch (source isn't compiled)�>��gg� �Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6F�%@- added new initscript option KEYTAB_FILE which specified where is located kerberos .keytab file for named service - obsolete temporary bind-9.5-spnego-memory_management.patch by bind-9.5-gssapictx-free.patch which conforms BIND coding standards (#251853)�F��fc�+ �Adam Tkac <atkac redhat com> 32:9.5.0-10.a6F��- dropped direct dependency to /etc/openldap/schema directory - changed hardcoded paths to macros - fired away code which configure LDAP serverk��eeu �Adam Tkac <atkac redhat com> 32:9.5.0-9.1.a6F��@- named could crash with SRV record UPDATE (#251336)�2��da� �Adam Tkac <atkac redhat com> 32:9.5.0-9.a6F�G�- disable 64bit dlz driver patch on alpha and ia64 (#251298) - remove wrong malloc functions from lib/dns/spnego.c (#251853)]��ceY �Adam Tkac <atkac redhat com> 32:9.5.0-8.2.a6F� @- changed licence from BSD-like to ISCc��bee �Adam Tkac <atkac redhat com> 32:9.5.0-8.1.a6F�$@- disabled named on all runlevels by default � ��I � X � d � � � = �A�T��\��&� � �P��c�? �Adam Tkac <atkac redhat com> 32:9.5.0-32.b3H)��- reverted "any" patch, upstream says not needed - log EDNS failure only when we really switch to plain EDNS (#275091) - detect configuration file better|��g� �Adam Tkac <atkac redhat com> 32:9.5.0-31.1.b3H H@- addresses 0.0.0.0 and ::0 really match any (#275091, comment #28)���c�? �Adam Tkac <atkac redhat com> 32:9.5.0-31.b3H ��- readded bind-9.5-libcap.patch - added bind-9.5-recv-race.patch from F8 branch (#400461)W��gK �Adam Tkac <atkac redhat com> 32:9.5.0-30.1.b3H$�- build Berkeley DB DLZ backend�]��c�Y �Adam Tkac <atkac redhat com> 32:9.5.0-30.b3H ��- 9.5.0b3 release - dropped patches (upstream) - bind-9.5-transfer-segv.patch - bind-9.5-mudflap.patch - bind-9.5.0-generate-xml.patch - bind-9.5-libcap.patch`��g] �Adam Tkac <atkac redhat com> 32:9.5.0-29.3.b2G�u@- fixed named.conf.sample file (#437569)D��g% �Adam Tkac <atkac redhat com> 32:9.5.0-29.2.b2G�h�- fixed URLsO�� g; �Adam Tkac <atkac redhat com> 32:9.5.0-29.1.b2G�- BuildRequires cleanupY�� cS �Adam Tkac <atkac redhat com> 32:9.5.0-29.b2G�\@- rebuild without mudflap (#434159)��� c�G �Adam Tkac <atkac redhat com> 32:9.5.0-28.b2G�@- port named to use libcap library, enable threads (#433102) - removed some unneeded Requires�O�� c�= �Adam Tkac <atkac redhat com> 32:9.5.0-27.b2G��- removed conditional build with libefence (use -fmudflapth instead) - fixed building of DLZ stuff (#432497) - do not build Berkeley DB DLZ backend - temporary build with --disable-linux-caps and without threads (#433102) - update named.ca file to affect IPv6 changes in root zone�k�� c�u �Adam Tkac <atkac redhat com> 32:9.5.0-26.b2G�8�- build with -D_GNU_SOURCE (#431734) - improved fix for #253537, posttrans script is now used - improved fix for #400461 - 9.5.0b2 - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch - only named, named-sdb and lwresd are PIE - bind-9.5-sdb.patch has been updated - bind-9.5-libidn.patch has been updated - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch - removed bind-9.5-gssapi-header.patch (upstream) - removed bind-9.5-CVE-2008-0122.patch (upstream) - removed bind-9.2.2-nsl.patch - improved sdb_tools Makefile.in���c�- �Adam Tkac <atkac redhat com> 32:9.5.0-25.b1G��@- fixed segfault during sending notifies (#400461) - rebuild with gcc 4.3 series�+��c�u �Adam Tkac <atkac redhat com> 32:9.5.0-24.b1G��- removed bind-9.3.2-prctl_set_dumpable.patch (upstream) - allow parallel building of libdns library - CVE-2008-0122� ��c�[ �Adam Tkac <atkac redhat com> 32:9.5.0-23.b1Gs��- fixed initscript wait loop (#426382) - removed dependency on policycoreutils and libselinux (#426515)j��cu �Adam Tkac <atkac redhat com> 32:9.5.0-22.b1GjY@- fixed regression caused by libidn2 patch (#426348)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-21.b1Gi�- fixed typo in post section (CVE-2007-6283)b��ce �Adam Tkac <atkac redhat com> 32:9.5.0-20.b1Gi�- removed obsoleted triggers - CVE-2007-6283� ��g�- �Adam Tkac <atkac redhat com> 32:9.5.0-19.2.b1G_�@- added dst/gssapi.h to -devel subpackage (#419091) - improved fix for (#417431)���g�G �Adam Tkac <atkac redhat com> 32:9.5.0-19.1.b1G]*@- fixed shutdown with initscript when rndc doesn't work (#417431) - fixed IDN patch (#412241)R�� cE �Adam Tkac <atkac redhat com> 32:9.5.0-19.b1GW�A- 9.5.0b1 (#405281, #392491)e���1 �Release Engineering <rel-eng at fedoraproject dot org> 32:9.5.0-18.6.a7GW�@- Rebuild for depsH��~g- �Adam Tkac <atkac redhat com> 32:9.5.0-18.5.a7GV��- build with -O0�}��}g� �Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7GS�- bind-9.5-random_ports.patch was removed because upstream doesn't like it. query-source{,v6} options are sufficient (#391931) - bind-chroot-admin called restorecon on /proc filesystem (#405281) N V�� � ~ � } # � U � 0 ��N�l�4�\��u �N `��0i[ �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.1.b1I3�- improved sample config file (#473586)g��/em �Adam Tkac <atkac redhat com> 32:9.6.0-0.4.b1I-:A- reverted previous change, koji doesn't like itT��.eG �Adam Tkac <atkac redhat com> 32:9.6.0-0.3.b1I-:@- build bind-chroot as noarch���-i�M �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.1.b1I*�@- updates due libtool 2.2.6 - don't pass -DLDAP_DEPRECATED to cpp, handle it directly in sources}��,e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.2.b1Is�- make statistics http server working, patch backported from 9.6 HEAD�:��+e� �Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1I"@- 9.6.0b1 release - don't build ODBC and Berkeley DB DLZ drivers - end of bind-chroot-admin script, copy config files to chroot manually - /proc doesn't have to be mounted to chroot - temporary use libbind from 9.5 series, noone has been released for 9.6 yet���*i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.4.b2I�- dig/host: use only IPv4 addresses when -4 option is specified (#469440)e��)ie �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.2.b2I ��- removed unneeded bind-9.4.1-ldap-api.patchk��(iq �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.1.b2I ��- ship dns/{s,}dlz.h and isc/radix.h in bind-develo��'e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.8.b2H�O@- removed bind-9.4.0-dnssec-directory.patch, it is wrong�@��&e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2H�+�- 9.5.1b2 release - patches merged - bind95-rh454783.patch - bind-9.5-edns.patch - bind95-rh450995.patch - bind95-rh457175.patcht��%e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.6.b1H��@- IDN output strings didn't honour locale settings (#461409)f��$ek �Adam Tkac <atkac redhat com> 32:9.5.1-0.5.b1H�@�- disable transfer stats on DLZ zones (#454783)i��#eq �Adam Tkac <atkac redhat com> 32:9.5.1-0.4.b1H��@- add forgotten patch for #457175 - build with -O2�}��"e� �Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1H��@- static libraries are no longer supported - IP acls weren't merged correctly (#457175) - use fPIE on sparcv9/sparc64 (Dennis Gilmore) - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)o��!e} �Adam Tkac <atkac redhat com> 32:9.5.1-0.2.b1H�z@- updated patches due new rpm (--fuzz=0 patch parameter)�� i� �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.1.b1H{?�- use %patch0 for Patch0 (#455061) - correct source address (#455118)� �� e�W �Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1HsV�- 9.5.1b1 release (CVE-2008-1447) - dropped bind-9.5-recv-race.patch because upstream doesn't want ite�� am �Adam Tkac <atkac redhat com> 32:9.5.0-37.1Hh�- update default named.conf statements (#452708)a�� ]i �Adam Tkac <atkac redhat com> 32:9.5.0-37Hc��- some compat changes to fix building on RHEL4V�� aO �Adam Tkac <atkac redhat com> 32:9.5.0-36.3H_�@- fixed typo in %posttrans script[��aY �Adam Tkac <atkac redhat com> 32:9.5.0-36.2HX��- parse inner acls correctly (#450995)� ��a�[ �Adam Tkac <atkac redhat com> 32:9.5.0-36.1HC�- removed dns-keygen utility in favour of rndc-confgen -a (#449287) - some minor sample fixes (#449274)z��]� �Adam Tkac <atkac redhat com> 32:9.5.0-36H>��- updated to 9.5.0 final - use getifaddrs to find available interfaces���e�# �Adam Tkac <atkac redhat com> 32:9.5.0-35.rc1H:�@- make /var/run/named writable by named (#448277) - fixed one non-utf8 filef��ek �Adam Tkac <atkac redhat com> 32:9.5.0-34.rc1H5`@- fixes needed to pass package review (#225614)d��ic �Adam Tkac <atkac redhat com> 32:9.5.0-33.1.rc1H4�- bind-chroot now depends on bind (#446477)�%��e�g �Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1H*�@- updated to 9.5.0rc1 - merged patches - bind-9.5-libcap.patch - make binaries readable by others (#427826) Z �T � t � m � z � ;��y�EP�� � Z ���Ja�% �Adam Tkac <atkac redhat com> 32:9.6.1-6.P1Jp9�- 9.6.1-P1 release (CVE-2009-0696) - fix postun trigger (#513016, hopefully)���I� � �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.6.1-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild^��H[e �Adam Tkac <atkac redhat com> 32:9.6.1-4Jd\@- remove useless bind-9.3.3rc2-rndckey.patch�B��G[�+ �Adam Tkac <atkac redhat com> 32:9.6.1-3J[!�- fix broken symlinks in bind-libs (#509635) - fix typos in /etc/sysconfig/named (#509650) - add DEBUG option to /etc/sysconfig/named (#510283)�#��F[�m �Adam Tkac <atkac redhat com> 32:9.6.1-2JB@- improved "chroot automount" patches (#504596) - host should fail if specified server doesn't respond (#507469)�p��E[� �Adam Tkac <atkac redhat com> 32:9.6.1-1J8�- 9.6.1 release - simplify chroot maintenance. Important files and directories are mounted into chroot (see /etc/sysconfig/named for more info, #504596) - fix doc/named.conf.default permsJ��Dg1 �Adam Tkac <atkac redhat com> 32:9.6.1-0.4.rc1J +@- 9.6.1rc1 release�a��Ci�[ �Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1I�A@- update the patch for dynamic loading of database backends - create %{_libdir}/bind directory - copy default named.conf to doc directory, shared with s-c-bind (atkac)���Bi�K �Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1I�- update the patch for dynamic loading of database backends - fix dns_db_unregister() - useradd now takes "-N" instead of "-n" (atkac, #495726) - print nicer error msg when zone file is actually a directory (atkac, #490837)���Ae�% �Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1Iд@- 9.6.1b1 release - patches merged - bind-96-isc_header.patch - bind-95-rh469440.patch - bind-96-realloc.patch - bind9-fedora-0001.diff - use -version-number instead of -version-info libtool param���@g�G �Adam Tkac <atkac redhat com> 32:9.6.0-11.1.P1I�y�- logrotate configuration file now points to /var/named/data/named.run by default (#489986)�O��?c�= �Adam Tkac <atkac redhat com> 32:9.6.0-11.P1I���- fall back to insecure mode when no supported DNSSEC algorithm is found instead of SERVFAIL - don't fall back to non-EDNS0 queries when DO bit is seto��>c �Adam Tkac <atkac redhat com> 32:9.6.0-10.P1I�V@- enable DNSSEC only if it is enabled in sysconfig/dnssec� ��=a�7 �Adam Tkac <atkac redhat com> 32:9.6.0-9.P1I��- add DNSSEC support to initscript, enabled it per default - add requires dnssec-confd��<ak �Adam Tkac <atkac redhat com> 32:9.6.0-8.P1I��- fire away libbind, it is now separate packageb��;ag �Adam Tkac <atkac redhat com> 32:9.6.0-7.P1I�m@- fixed some read buffer overflows (upstream)���:�!� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 32:9.6.0-6.P1I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��9e�7 �Martin Nagy <mnagy redhat com> 32:9.6.0-5.P1I�@- update the patch for dynamic loading of database backends - include iterated_hash.hX��8sA �Caolán McNamara <caolanm@redhat.com> 32:9.6.0-4.P1I{�- rebuild for dependenciesR��7aG �Adam Tkac <atkac redhat com> 32:9.6.0-3.P1Iw@- rebuild against new opensslW��6aQ �Adam Tkac <atkac redhat com> 32:9.6.0-2.P1Ie�- 9.6.0-P1 release (CVE-2009-0025)R��5[M �Adam Tkac <atkac redhat com> 32:9.6.0-1Ia�@- Happy new year - 9.6.0 releasej��4gq �Adam Tkac <atkac redhat com> 32:9.6.0-0.7.rc2IJ;@- 9.6.0rc2 release - bind-96-rh475120.patch mergedn��3ku �Martin Nagy <mnagy redhat com> 32:9.6.0-0.6.rc1IG�@- add patch for dynamic loading of database backends��2k� �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.1.rc1I>]�- allow to reuse address for non-random query-source ports (#475120)�$��1g�c �Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1I6t�- 9.6.0rc1 release - patches merged - bind-9.2.0rc3-varrun.patch - bind-95-sdlz-include.patch - bind-96-libxml2.patch - fixed rare use-after-free problem in host utility (#452060) - enabled chase of DNSSEC signature chains in dig � �3� � � @ � E � Q � � �'����3�\��;� � ���ge�S �Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1L��- update to 9.7.1b1 - make /var/named/dynamic as a default directory for managed DNSSEC keys - add patch to get "managed-keys-directory" option working - patches merged - bind97-managed-keyfile.patch - bind97-rh554316.patch]��fc[ �Adam Tkac <atkac redhat com> 32:9.7.0-11.P2K�u�- update dnssec-conf Obsoletes/ProvidesJ��ec5 �Adam Tkac <atkac redhat com> 32:9.7.0-10.P2K�$@- update to 9.7.0-P2u��da� �Adam Tkac <atkac redhat com> 32:9.7.0-9.P1K���- added lost patch for #554316 (occasional crash in keytable.c)���ca�Q �Adam Tkac <atkac redhat com> 32:9.7.0-8.P1K���- active query might be destroyed in resume_dslookup() which triggered REQUIRE failure (#507429)l��ba{ �Adam Tkac <atkac redhat com> 32:9.7.0-7.P1K�[�- install SDB related manpages only when build with SDBI��aa5 �Adam Tkac <atkac redhat com> 32:9.7.0-6.P1K�g@- update to 9.7.0-P1P��`_E �Jan Görig <jgorig redhat com> 32:9.7.0-5K�r�- bind-sdb now requires bind��__�! �Jan Görig <jgorig redhat com> 32:9.7.0-4K�!@- add man-pages ldap2zone.1 zonetodb.1 zone2sqlite.1 named-sdb.8 (#525655)Y��^[[ �Adam Tkac <atkac redhat com> 32:9.7.0-3K��A- fix multilib issue (#478718) [jgorig]�n��][� �Adam Tkac <atkac redhat com> 32:9.7.0-2K��@- improve automatic DNSSEC reconfiguration trigger - initscript now returns 2 in case that action doesn't exist (#523435) - enable/disable chroot when bind-chroot is installed/uninstalledI��\[; �Adam Tkac <atkac redhat com> 32:9.7.0-1K{�@- update to 9.7.0 final���[i� �Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2Ky7@- obsolete dnssec-conf - automatically update configuration from old dnssec-conf based - improve default configuration; enable DLV by default - remove obsolete triggerpostun from bind-libs subpackageM��Zi5 �Adam Tkac <atkac redhat com> 32:9.7.0-0.13.rc2Ka|@- update to 9.7.0rc2a��Yi] �Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1K`*�- initscript LSB related fixes (#523435)���Xi�' �Adam Tkac <atkac redhat com> 32:9.7.0-0.11.rc1K`*�- revert the "DEBUG" feature (#510283), it causes too many problems (#545128)� ��Wi�/ �Adam Tkac <atkac redhat com> 32:9.7.0-0.10.rc1K'z@- update to 9.7.0rc1 - bind97-headers.patch merged - update default configurationJ��Ve3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.9.b3K@- update to 9.7.0b3W��UeM �Adam Tkac <atkac redhat com> 32:9.7.0-0.8.b2Km�- install isc/namespace.h headerJ��Te3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.7.b2J��- update to 9.7.0b2�!��Se�_ �Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1J�@- update to 9.7.0b1 - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC keys� ��Re� �Adam Tkac <atkac redhat com> 32:9.7.0-0.5.a3J��@- don't package named-bootconf utility, it is very outdated and unneededr��Qe� �Adam Tkac <atkac redhat com> 32:9.7.0-0.4.a3J�j�- determine file size via `stat` instead of `ls` (#523682)J��Pe3 �Adam Tkac <atkac redhat com> 32:9.7.0-0.3.a3J��@- update to 9.7.0a3�[��Oe�S �Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2J���- improve chroot related documentation (#507795) - add NetworkManager dispatcher script to reload named when network interface is activated/deactivated (#490275) - don't set/unset named_write_master_zones SELinux boolean every time in initscript, modify it only when it's actually needed���Ne�I �Adam Tkac <atkac redhat com> 32:9.7.0-0.1.a2J���- update to 9.7.0a2 - merged patches - bind-96-db_unregister.patch - bind96-rh507469.patch�%��Ma�k �Adam Tkac <atkac redhat com> 32:9.6.1-9.P1J� �- next attempt to fix the postun trigger (#520385) - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patchR��LgA �Tomas Mraz <tmraz@redhat.com> - 32:9.6.1-8.P1J��@- rebuilt with new openssls��Ke� �Martin Nagy <mnagy redhat com> 32:9.6.1-7.P1Jx"�- update the patch for dynamic loading of database backends ! � �� � q � � l ? � ,�(�s��.�4� ?��)�P � � Y��aU �Adam Tkac <atkac redhat com> 32:9.8.0-3.P1M��- update to 9.8.0-P1 (CVE-2011-1907)l��Y� �Dan Horák <dan@danny.cz> - 32:9.8.0-2M��- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)b��[m �Adam Tkac <atkac redhat com> 32:9.8.0-1Mo��- update to 9.8.0 - bind97-rh665971.patch mergedo��g{ �Adam Tkac <atkac redhat com> 32:9.8.0-0.4.rc1Mo��- revert previous change (integration with libnmserver)b��ga �Adam Tkac <atkac redhat com> 32:9.8.0-0.3.rc1Mc�A- integrate named with libnmserver library\��gU �Adam Tkac <atkac redhat com> 32:9.8.0-0.2.rc1Mc�@- include dns/rpz.h in -devel subpkgL��g5 �Adam Tkac <atkac redhat com> 32:9.8.0-0.1.rc1MbS�- update to 9.8.0rc1�Z��[�[ �Adam Tkac <atkac redhat com> 32:9.7.3-1M^_@- update to 9.7.3 - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings� �� �+� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.7.3-0.6.rc1MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildn��gy �Adam Tkac <atkac redhat com> 32:9.7.3-0.5.rc1M>�@- update to 9.7.3rc1 - bind97-krb5-self.patch mergedO��~e= �Adam Tkac <atkac redhat com> 32:9.7.3-0.4.b1M-��- fix typo in initscript�"��}e�a �Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1M%��- fix "service named status" when used with named-sdb - don't check MD5, size and mtime of sysconfig/namedp��|e �Adam Tkac <atkac redhat com> 32:9.7.3-0.2.b1M$]B- add new option DISABLE_ZONE_CHECKING to sysconfig/namedJ��{e3 �Adam Tkac <atkac redhat com> 32:9.7.3-0.1.b1M$]A- update to 9.7.3b1��zc� �Adam Tkac <atkac redhat com> 32:9.7.2-10.P3M$]@- initscript should terminate only the correct "named" process (#622785)d��yak �Adam Tkac <atkac redhat com> 32:9.7.2-9.P3ME@- fix "krb5-self" update-policy rule processingI��xa5 �Adam Tkac <atkac redhat com> 32:9.7.2-8.P3L��@- update to 9.7.2-P3���we�' �Jan Görig <jgorig redhat com> 32:9.7.2-7.P2L�- added tmpfiles.d support (#656550) - removed old PID checking in initscriptv��va� �Adam Tkac <atkac redhat com> 32:9.7.2-6.P2L��@- don't emit various informational messages by default (#645544)� ��ua�[ �Adam Tkac <atkac redhat com> 32:9.7.2-5.P2L��- move BIND9 internal libs back to %{_libdir} - add "-export" suffix to public libraries (-lite subpkg)m��ta} �Adam Tkac <atkac redhat com> 32:9.7.2-4.P2L��A- ship -devel subpkg for internal libs, dnsperf needs it�[��sa�W �Adam Tkac <atkac redhat com> 32:9.7.2-3.P2L��@- new bind-libs-lite and bind-lite-devel subpkgs which contain public version of BIND 9 libraries - don't ship devel files for internal version of BIND 9 librariesI��ra5 �Adam Tkac <atkac redhat com> 32:9.7.2-2.P2L�*@- update to 9.7.2-P2C��q[/ �Adam Tkac <atkac redhat com> 32:9.7.2-1L��- update to 9.7.2L��pg5 �Adam Tkac <atkac redhat com> 32:9.7.2-0.3.rc1Lw��- update to 9.7.2rc1���oe�% �Adam Tkac <atkac redhat com> 32:9.7.2-0.2.b1La?@- host: handle "debug", "attempts" and "timeout" options in resolv.conf wellv��ne� �Adam Tkac <atkac redhat com> 32:9.7.2-0.1.b1LX�- update to 9.7.2b1 - patches merged - bind97-rh507429.patchg��maq �Adam Tkac <atkac redhat com> 32:9.7.1-5.P2LD>A- supply root zone DNSKEY in default configurationY��laU �Adam Tkac <atkac redhat com> 32:9.7.1-4.P2LD>@- update to 9.7.1-P2 (CVE-2010-0213)�z��ka� �Adam Tkac <atkac redhat com> 32:9.7.1-3.P1L;�- remove outdated Copyright.caching-nameserver file - remove rfc1912.txt, it is already located in %doc/rfc directory - move COPYRIGHT to the bind-libs subpkg - add COPYRIGHT to the -pkcs11 subpkgI��ja5 �Adam Tkac <atkac redhat com> 32:9.7.1-2.P1L7@- update to 9.7.1-P1g��i[w �Adam Tkac <atkac redhat com> 32:9.7.1-1L(��- update to 9.7.1 - improve the "dnssec-conf" triggerw��hg� �Adam Tkac <atkac redhat com> 32:9.7.1-0.2.rc1L�@- update to 9.7.1rc1 - patches merged - bind97-keysdir.patch S �E�� � � � K � � � �;�9���%�:�1�* � S v��&s} �Ville Skyttä <ville.skytta@iki.fi> - 32:9.9.1-3.P1O�j�- Avoid shell invocation and dep for -libs-lite %postun.Y��%aU �Adam Tkac <atkac redhat com> 32:9.9.1-2.P1Ọ@- update to 9.9.1-P1 (CVE-2012-1667)���$[�/ �Adam Tkac <atkac redhat com> 32:9.9.1-1O�"�- update to 9.9.1 - bind99-coverity.patch merged - bind-9.5-overflow.patch mergedz��#[� �Adam Tkac <atkac redhat com> 32:9.9.0-6O��@- nslookup: return non-zero exit code when fail to get answer (#816164)m��"[� �Adam Tkac <atkac redhat com> 32:9.9.0-5O�8�- initscript: don't umount /var/named when didn't mount it���![�M �Adam Tkac <atkac redhat com> 32:9.9.0-4O���- apply all non-SDB patches before SDB ones (#804475) - enable Berkeley DB DLZ backend (#804478)z�� [� �Adam Tkac <atkac redhat com> 32:9.9.0-3O��- bind97-rh699951.patch is no longer needed (different fix is in 9.9.0)W�� [W �Adam Tkac <atkac redhat com> 32:9.9.0-2OpZ@- remove unneeded bind99-v6only.patch� �� [�A �Adam Tkac <atkac redhat com> 32:9.9.0-1OT��- update to 9.9.0 - load dynamic DBs later (and update dyndb patch) - fix memory leak in named during processing of rndc command - don't call `rndc-confgen -a` in "post" section - fix some packaging bugs in bind-chroot[�� gS �Adam Tkac <atkac redhat com> 32:9.9.0-0.8.rc2O;�@- build with "--enable-fixed-rrset"��� g�' �Adam Tkac <atkac redhat com> 32:9.9.0-0.7.rc2O))@- update to 9.9.0rc2 - doc/rfc and doc/draft are no longer shipped in tarballv��g� �Adam Tkac <atkac redhat com> 32:9.9.0-0.6.rc1O&�@- retire initscript in favour of systemd unit files (#719419)L��g5 �Adam Tkac <atkac redhat com> 32:9.9.0-0.5.rc1O�@- update to 9.9.0rc1\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.4.b2N�U@- ship dns/forward.h in -devel subpkg� ��e�W �Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2Nˎ�- update to 9.9.0b2 (CVE-2011-4313) - patches merged - bind97-rh700097.patch - bind99-cinfo.patch\��eW �Adam Tkac <atkac redhat com> 32:9.9.0-0.2.b1N��- ship dns/clientinfo.h in bind-develm��ey �Adam Tkac <atkac redhat com> 32:9.9.0-0.1.b1N�@- update to 9.9.0b1 - bind98-dlz_buildfix.patch mergedd��[q �Adam Tkac <atkac redhat com> 32:9.8.1-4N��@- nslookup failed to resolve name in certain casesh��[y �Adam Tkac <atkac redhat com> 32:9.8.1-3N�i@- remove deps filter, it is no longer needed (#739663)W��[W �Adam Tkac <atkac redhat com> 32:9.8.1-2Ni��- fix logrotate config file (#725256)�'��[�u �Adam Tkac <atkac redhat com> 32:9.8.1-1Ng\�- update to 9.8.1 - ship /etc/trusted-key.key (needed by dig) - use select instead of epoll in export libs (#735103)�?��g� �Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1N^"B- fix DLZ related compilation issues - make /etc/named.{root,iscdlv}.key world-readable - add bind-libs versioned requires to bind pkg�%��g�e �Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1N^"A- fix rare race condition in request.c - print "the working directory is not writable" as debug message - re-add configtest target to initscript - initscript: sybsys name is always named, not named-sdb - nsupdate returned zero when target zone didn't exist (#700097) - nsupdate could have failed if server has multiple IPs and the first was unreachable (#714049)�+��g�q �Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1N^"@- update to 9.8.1rc1 - patches merged - bind97-rh674334.patch - bind97-cleanup.patch - bind98-includes.patchP��aC �Adam Tkac <atkac redhat com> 32:9.8.0-9.P4N98@- improve patch for #725741��� a�% �Adam Tkac <atkac redhat com> 32:9.8.0-8.P4N.�@- named could have crashed during reload when dyndb module is used (#725741)p�� a� �Adam Tkac <atkac redhat com> 32:9.8.0-7.P4N��- update to 9.8.0-P4 - bind98-libdns-export.patch mergedM�� a= �Adam Tkac <atkac redhat com> 32:9.8.0-6.P2M�{@- update the dyndb patchZ�� aW �Adam Tkac <atkac redhat com> 32:9.8.0-5.P2MߒA- fix compilation of libdns-export.soY�� aU �Adam Tkac <atkac redhat com> 32:9.8.0-4.P2Mߒ@- update to 9.8.0-P2 (CVE-2011-1910) � _V � f � ? � X z % 8)�&�M�8�)U>�3 � a��Bae �Tomas Hozza <thozza@redhat.com> 32:9.9.3-2Q��A- bump release to prevent update path issues� ��Aa�] �Tomas Hozza <thozza@redhat.com> 32:9.9.3-1Q��@- update to 9.9.3 - install dns/update.h header - update RRL patch to the latest version 9.9.3-rl.150.20d��@m_ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.7.rc2Q��- Fix segfault in host/nslookup (#878139)���?m�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2Q��- update to 9.9.3rc2 - part of bind97-exportlib.patch not needed any more - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch - bind99-opts.patch merged�O��>m�3 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1Q���- Include recursion Warning in named.conf and named.conf.sample (#740894) - Include managed-keys-directory statement in named.conf.sample (#948026)� ��=m�/ �Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.4.rc1Q�U@- Fix zone2sqlite to quote table names when creating/dropping/inserting (#919417)y��<g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.3.rc1Qq1�- fix crash in nsupdate when processing "-r" parameter (#949544)Y��;gO �Adam Tkac <atkac redhat com> 32:9.9.3-0.2.rc1Qm=A- ship dns/rrl.h in -devel subpkg�3��:g� �Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1Qm=@- update to 9.9.3rc1 - bind-96-libtool2.patch has been merged - fix bind tmpfiles.d for named.pid /run migration (#920713)u��9i� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-12.P2QR�@- New upstream patch version fixing CVE-2013-2266 (#928032)\��8cY �Adam Tkac <atkac redhat com> 32:9.9.2-11.P1QHS@- move pidfile to /run/named/named.pid���7i�! �Tomas Hozza <thozza@redhat.com> 32:9.9.2-10.P1Q7/�- Fix Makefile.in to include header added by rate limiting patch (#918330)v��6a� �Adam Tkac <atkac redhat com> 32:9.9.2-9.P1Q5�@- drop some developer-only documentation and move ARM to %docdirR��5aG �Adam Tkac <atkac redhat com> 32:9.9.2-8.P1Q"�- include rate limiting patch�4��4g� �Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1Q��- Corrected IP addresses in named.ca (#901741) - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)�h��3a�q �Adam Tkac <atkac redhat com> 32:9.9.2-6.P1P��- generate /etc/rndc.key during named service startup if doesn't exist - increase startup timeout in systemd units to 90sec (default) - fix IDN related statement in dig.1 manpageQ��2g? �Tomas Hozza <thozza@redhat.com> 32:9.9.2-5.P1P�7@- update to bind-9.9.2-P1���1[�3 �Adam Tkac <atkac redhat com> 32:9.9.2-4P��- document dig exit codes in manpage - ignore empty "search" options in resolv.confO��0[G �Adam Tkac <atkac redhat com> 32:9.9.2-3P��- drop PKCS11 support on rhelF��/[5 �Adam Tkac <atkac redhat com> 32:9.9.2-2Pv��- install isc/stat.h���.[�W �Adam Tkac <atkac redhat com> 32:9.9.2-1Pv��- update to 9.9.2 - bind97-rh714049.patch has been dropped - patches merged - bind98-rh816164.patchO��-c? �Adam Tkac <atkac redhat com> 32:9.9.1-10.P3PQ�- update to bind-9.9.1-P3�O��,g�9 �Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2P4�- fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045) - changed %define macros to %global and fixed several rpmlint warnings���+g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-8.P2P"T�- Changed PrivateTmp to "false" in *-chroot.service unit files (#825869)f��*gi �Tomas Hozza <thozza@redhat.com> 32:9.9.1-7.P2P@- Fixed bind-devel multilib conflict (#478718)�7��)g� �Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2Pw@- Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047) - Fixed path to libdb.so in config.dlz.inI��(a5 �Adam Tkac <atkac redhat com> 32:9.9.1-5.P2P1@- update to 9.9.1-P2� ��'�%� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 32:9.9.1-4.P1P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � m: � M � 7 � Z " ���u!�h���N;�� � ���\g�! �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19UT�@- Install config for tmpfiles under %{_tmpfilesdir} (#1180976) - Fixed systemctl path in logrotate configuration (#1164264) - remove information about system-config-bind from named.8 man page (#1152066)M��[k3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.1T�P�- Fix CVE-2015-1349V��ZgI �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18T�5�- Fix CVE-2014-8500 (#1171976)���Yg�7 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17T�@- Fix error in dyndb API that can cause named to freeze on shutdown (#1142150) - Fix error in triggerun scriptlet (#1143033) - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)y��Xg� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-16S��@- Add versioned requires on bind-libs to bind-utils and bind-sdb�Z��Wg�O �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15S�- Use /dev/urandom when generating rndc.key file (#1107568) - Allow authentication using TSIG in allow-notify configuration statement (#1067424) - Fix race condition when destroying a resolver fetch object (#1072379) - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959) - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)P��Ve? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-14R�U�- Mass rebuild 2014-01-24f��Ugi �Honza Horak <hhorak@redhat.com> - 32:9.9.4-13R�x@- Rebuild for mariadb-libs Related: #1045013I��Tc3 �Tomas Hozza <thozza@redhat.com> 32:9.9.4-12R�&�- Fix CVE-2014-0591h��Scq �Tomas Hozza <thozza@redhat.com> 32:9.9.4-11Rʚ�- Build against libdb instead of libdb4 (#1044990)P��Re? �Daniel Mach <dmach@redhat.com> - 32:9.9.4-10R�k�- Mass rebuild 2013-12-27��Qa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-9R��@- Fix crash in rbtdb after two sucessive getoriginnode() calls (#1044026)�7��Pa� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-8R�<�- Split chroot package for named and named-sdb - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)�a��Oa�c �Tomas Hozza <thozza@redhat.com> 32:9.9.4-7R�j�- Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384) - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)���Na�' �Tomas Hozza <thozza@redhat.com> 32:9.9.4-6R�0@- Fixed memory leak in nsupdate if 'realm' was used multiple times (#1034824)�Z��Ma�U �Tomas Hozza <thozza@redhat.com> 32:9.9.4-5R�@- Install configuration for rwtab and fix chroot setup script (#1028189) - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)U��LaM �Tomas Hozza <thozza@redhat.com> 32:9.9.4-4RrF@- Correct the patch for #1020683r��Ka� �Tomas Hozza <thozza@redhat.com> 32:9.9.4-3Ro�@- Fix race condition on send buffers in dighost.c (#1020683)c��Jai �Tomas Hozza <thozza@redhat.com> 32:9.9.4-2RS�- install isc/errno2result.h header (#1015165)���Ia�? �Tomas Hozza <thozza@redhat.com> 32:9.9.4-1R@-@- update to 9.9.4 (#1010200) - drop merged patches - modify patches to fit on new version~��Hg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-8.P2R/ �- Fix [ISC-Bugs #34738] dns_journal_open() returns a pointer to stackk��Ggs �Tomas Hozza <thozza@redhat.com> 32:9.9.3-7.P2RA- Don't generate rndc.key if there exists rndc.confz��Fg� �Tomas Hozza <thozza@redhat.com> 32:9.9.3-6.P2R@- don't install named-sdb.service if SDB macro is defined to zero�Z��Eg�O �Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2Q��- update to 9.9.3-P2 (fix for CVE-2013-4854) - update RRL patch to 9.9.3-P2-rl.13207.22 - Fix script for setting up chroot so it unmounts everything successfullyP��Dg= �Tomas Hozza <thozza@redhat.com> 32:9.9.3-4.P1Q�L�- Fix dates in Changelog���Cg�7 �Tomas Hozza <thozza@redhat.com> 32:9.9.3-3.P1Q�(@- update to 9.9.3-P1 (fix for CVE-2013-3919) - update RRL patch to 9.9.3-P1-rl.156.01 � Q� , � 6 � � * � � = �i�f�J� V�T�e�E � ���xo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-47Xۡ�- Simplify change of used config file, point to KB article (#1271315)w��wo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-46X�P@- Make comment how to use different config file (#1271315)� ��vo�S �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-45X�~@- Install again dns/dlz.h skipped in rebase - Fixed coverity warnings on reenabled test dlzexternal���uo� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-44X��@- Backported new upstream dyndb interface, removed dynamic_db (#1393886)a��toW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-43X��- Do not warn on WKS patch (#1392362)[��soK �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-42X�+�- Support WKS records in chroot� ��ro�O �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-41X�@- Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)�.��qo�o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40X���- Fix possible infinite loop in start_lookup (CVE-2016-2775) - Do not change lib permissions in chroot (#1392531)�m��po�m �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39Xs{@- Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)K��og3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-38X2@- Fix CVE-2016-8864K��ng3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-37W�@- Fix CVE-2016-2776�H��mg�+ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36W3 �- Added automatic interface scan functionality (#1294506) - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)X��lgM �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-35W4�- Added GeoIP support (#1220594)�"��kg�_ �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34V�b�- Added support for CAA records (#1306610) - Use HTTPS URL instead of FTP for upstream sources (#1319280)�n��jg�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33V�3�- Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185) - Fix error in internal test suite (#1259514) - Fix named-checkconf call in *-chroot.service files (#1278082) - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)]��igW �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-32V�- Fix CVE-2016-1285 and CVE-2016-1286K��hg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-31V��- Fix CVE-2015-8704K��gg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-30Vn�@- Fix CVE-2015-8000K��fg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-29U��- Fix CVE-2015-5722j��egq �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-28U���- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1235609)K��dg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-27U�n�- Fix CVE-2015-5477K��cg3 �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-26U��- Fix CVE-2015-4620h��bgm �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-25U��@- Fixed nsupdate realm auto-detection (#1214827)���ag�% �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-24U�3@- Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named (#1236475)�n��`g�w �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23UlI@- Don't copy /etc/localtime on -chroot package installation (#1186773) - Fix SPF resource records check to comply with RFC7208 (#1215164) - Don't use ISC's DLV by default (#1223336)�B��_g� �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22U_@- Add version specific requires on bind for bind-pkcs11 (Related: #1097753) - Resolve issues found by static analysis (Related: #1097753)g��^gk �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-21U]�- Added native PKCS#11 functionality (#1097753)�*��]g�o �Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20U\w@- DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180) � s��' � @ � H � q P � � �&��� �F�>��X�n � � c��uU �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P2\�e�- Use /sbin/nologin again (#1676661)~��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P2\��A- Make sure selinux-policy is installed soon enough (#1647659)|��u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-4.P2\��@- Disable custom random generator for export libs (#1685940)f��u[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-3.P2\��@- Fix memory handling in zone2ldap tool���u�1 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2.P2\w�@- Move dnssec utilities back to bind package - Remove separate python-bind package�c��u�S �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2\P@@- Rebase features patches - Disable autodetected eddsa algorithm ED448 - Add versioned depends to all library subpackages - Fix multilib conflict of devel packagesc��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-73[��- Fixes debug level comments (#1647539)�0��o�s �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72[���- Fix automatic selinux boolean named_write_master_zones (#1569466) - Allow starting named with readonly home againO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-71[j�@- Fix CVE-2018-5740S��o; �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-70[/��- Fix compiler warningsj��oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-69[+�A- Refetch always records with TTL 0 (#1549130)}�� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-68[+�@- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)m�� oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-67["X�- Move change of dns_view_t to the end (#1452091)� �� o�Q �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-66[5@- Correct recursing file name (#1435883) - Use python binary again, install all modules (#1510008)� �� o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-65[�- Add rndc secroots and recursing output files into data (#1435883)j�� oi �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-64[ �A- Backported negative trust anchors (#1452091)���o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-63[ �@- Make named home writeable (#1569466) - Change named shell to /bin/falses��uu �Martin Sehnoutka <msehnout@redhat.com> - 32:9.9.4-62[@- Resolves: #1510008 - add support for dnssec-keymgrO��o3 �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-61Z]�@- Fix CVE-2017-3145c��o[ �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-60Z&�@- Fix regression caused by bug #1470637�8��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59Z �@- Support for additional signing algorithms in rndc (#1501531) - New autogenerated rndc keys will use hmac-sha256 algorithm`��oU �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-58Y�e�- Fix multilib regression in headersi��og �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-57Y�@- Add with-tunning=large support (#rh1464850)f��oa �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-56Y�- Fix named-chroot restart leak (#1503646)u�� o �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-55Y�Y@- Handle dig timeouts the same way as upstream (#1470637){��o� �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-54Y��- Do not use next search domain on timeout from dig (#1470637)o��~os �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-53Y�m@- Fixed TSIG validation of AXFR and IXFR (#1476013)p��}ou �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-52Y_w�- Add missing manual for dnssec-importkey (#1472862)a��|oW �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-51YT�- Fix CVE-2017-3142 and CVE-2017-3143m��{oo �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-50Y"�- Update root servers and trust anchor (#1452635)r��zoy �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-49X���- Address deadlock between view.c and adb.c (#1416304)���yo�# �Petr Menšík <pemensik@redhat.com> - 32:9.9.4-48X��@- Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) p ���< � X � c � z � @ � =�H�8�;<�\�J�B�4 p �?��6}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���5{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��4{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��3{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���2{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���1{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)���0{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d��/wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t��.wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z��-{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g��,{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� ��+{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[��*wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,��)w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){��(w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r��'wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)���&w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x��%w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)���$}� �Miroslav Lichvar <mlichvar@redhat.com> - 32:9.11.4-18.P2^_�@- Disable atomic operations on ppc64, ppc64le, aarch64 (#1779589)�+��#s�e �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2^O�@- Prevent deadlock on reload (#1781576) - Disable unit test timer_test on ppc64le because of its instabilitys��"ws �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2]�+�- Finish dig query when name is too long (#1743572)n��!wi �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-15.P2]�e@- Stop listening on IPv6 by default (#1753259)}�� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-14.P2]��@- Limit number of queries per TCP connection (CVE-2019-6477)p�� wm �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-13.P2]��@- Revert not searching names with dot (#1743572)m�� wg �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-12.P2]p��- Fix mkeys test validating CVE-2018-5745 fixo�� so �Pavel Zhukov <pzhukov@redhat.com> - 32:9.11.4-11.P2]Ik�- Use monotonic time in export library (#1093803)g�� w[ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-10.P2]/ �- Fix CVE-2018-5745 - Fix CVE-2019-6465R��u3 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-9.P2] #�- Fix CVE-2019-6471���u� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P2] �@- Fix scriptlet errors when selinux-policy is not installed (#1647659)t��uw �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P2\�O�- Fix inefective limit of TCP clients (CVE-2018-5743) f a�Z � D < � 4 � & b�O�5�i���"�| � f � ��Ps�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Os� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���N}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��M}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���L}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��K}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���J{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��I{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��H{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�8��G�'�I �Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 32:9.11.4-26.P2.15.tuxcare.els1f;i@- Moved tuxcare patches from 32:9.11.4-26.P2.14 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��Fs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Es� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���D}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��C}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���B}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��A}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���@{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��?{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q��>{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake���={�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)���<� �i �Pavel Mayorov <pmayorov@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els2e� @- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3� ��;� �Linar Nadeev <lnadeev@cloudlinux.com> - 2:9.11.4-26.P2.14.tuxcare.els1ej�- Limit isccc_cc_fromwire recursion depth (CVE-2023-3341)���:q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���9}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��8}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���7}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) A �5 � ' c � P � 6 �Z���Q�J�4�i A �#��f�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��e�[ Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ds� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��cs�# Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���bs� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���a}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��`}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���_}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��^}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�#��]�)� �Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��\�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��[s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��Zs�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���Ys� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���X}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��W}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���V}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?��U}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)���T{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m��S{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)z��R�[ �Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��Qs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � = v o � Y �f�{�S�9�]� � �#��z�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��y�[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��xs� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ws�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���vs�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���u}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��t}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�/��s��CLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��r� �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��q�)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#��p�)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez��o�[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��ns� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��ms�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)���ls�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���k}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p��j}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)���i}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�#��h� �' Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��g�)�S Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 ( = a � � � :O's� ���( z�� �[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H�� s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �� s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�2�� �'�=Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.����EJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����CLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec filez���[Dmitrii Zudin <dzudin@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els1f�w�- Bump the epoch to fix package upgrade�H��s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� ��s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��� s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)���}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)�.��~��EJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/��}��CLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��|� �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>��{�)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000 � � � 9 � � � 5�Z���e"�c��T �}�u� � ���)#�eJim Kingdon7�}�- No source/spec changes, just rebuilding with egcs-1.1.2-18 because the older egcs was miscompling gprof.�5��(S�Cristian Gafton <gafton@redhat.com>7$U@- back out very *stupid* sparc patch done by HJLu. People, keep out of things you don't understand. - add alpha relax patch from rth�*��'S�Cristian Gafton <gafton@redhat.com>7��- version 2.9.1.0.23 - patch to make texinfo documentation compile - auto rebuild in the new build environment (release 2)`��&SqCristian Gafton <gafton@redhat.com>6Ҙ@- updated to 2.9.1.0.21 - merged with UltraPenguin� ��%S�mCristian Gafton <gafton@redhat.com>6��@- added ARM patch from philb - version 2.9.1.0.19a - added a patch to allow arm* arch to be identified as an ARMF��$S=Cristian Gafton <gafton@redhat.com>6n�- updated to 2.9.1.0.14.@��#G=Jeff Johnson <jbj@redhat.com>6��- updated to 2.9.1.0.13.E��"S;Cristian Gafton <gafton@redhat.com>5�m�- updated to 2.9.1.0.12?��!G;Jeff Johnson <jbj@redhat.com>5�v@- updated to 2.9.1.0.7.?�� G;Jeff Johnson <jbj@redhat.com>5u:�- updated to 2.9.1.0.6.��� C�GErik Troan <ewt@redhat.com>5s�@- added patch from rth to get right offsets for sections in relocateable objects on sparc32T�� SYProspector System <bugs@redhat.com>5Q�@- translations modified for de, fr, trc�� SwCristian Gafton <gafton@redhat.com>5N�A- version 2.9.1.0.4 is out; even more, it is public !?�� G;Jeff Johnson <jbj@redhat.com>5N�@- updated to 2.9.1.0.3.B��S5Cristian Gafton <gafton@redhat.com>5;8�- updated to 2.9.0.3C��S7Cristian Gafton <gafton@redhat.com>53O�- upgraded to 2.9.0.2�H��S�?Cristian Gafton <gafton@redhat.com>5'r@- updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target... :-) - "fixed" the damn make install command so that all tools get installed���S�[Cristian Gafton <gafton@redhat.com>5#}�- upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile) - added info packages handlingF��S=Cristian Gafton <gafton@redhat.com>5+@- upgraded to 2.8.1.0.23� ��S�GCristian Gafton <gafton@redhat.com>4��@- updated to 2.8.1.0.15 (required to compile the newer glibc) - all patches are obsoleted nowo��C� Erik Troan <ewt@redhat.com>4M�- added 2.8.1.0.1 patch from hj - added patch for alpha palcode form rth�"���'� Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8gڱ�- Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that breaks bind-dyndb-ldap - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15 update�2���'�=Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els7g��@- CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates�.����EJai S <jsathyapalan@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els6g���- CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9�/����CLinar Nadeev <lnadeev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els5gI��- Removed the bind-9.11.4-CVE-2023-2828-fixup.patch which caused problems with named-pkcs11�#��� �'Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4fѴ@- CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES - Fix man8 pages for dnssec utils�>���)�SLizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els3fͿ�- CVE-2024-1737: increase DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES definitions to 1000�#���)� Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2fą@- CVE-2024-1737: add a limit to the number of RRs in RRSets and RR types for single name - CVE-2024-1975: remove support for SIG(0) message verification - Fix the SYSTEMTEST section in the spec file & � �O �M � z � � A � � w = � x � � =�n�:� �t H��v � �]��Ok�QJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11;�q�- add iplt support for IA-64 (Richard Henderson) - switch to new section flags for SHF_MERGE and SHF_STRINGS, put in compatibility code - "s" section flag for small data sections on IA-64 and Alpha (Richard Henderson) - fix sparc64 .plt[32768+] handling - don't emit .rela.stab on sparcR��Nk=Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-10;��@- fix SHF_MERGE on Sparcr��MiJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-9;�|@- on Alpha, copy *r_offset to R_ALPHA_RELATIVE's r_addend�5��Li�Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8;�*�- on IA-64, put crtend{,S}.o's .IA_64.unwind section last in .IA_64.unwind output section (for compatibility with 7.1 eh)� ��Ki�SJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-7;�A�- put RELATIVE relocs first, not last - enable -z combreloc by default on IA-{32,64}, Alpha, Sparc*�Q��Ji�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6;��@- support for -z combreloc - remove .dynamic patch, -z combreloc patch does this better - set STT_FUNC default symbol sizes in .endp directive on IA-64R��Ii?Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-5;R�@- fix last patch (H.J.Lu)Y��HiMJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-4;N�- fix placing of orphan sectionsK��GMMJakub Jelinek <jakub@redhat.com>;4��- fix SHF_MERGE support on Alpha�C��FM�;Jakub Jelinek <jakub@redhat.com>; �@- 2.11.90.0.8 - some SHF_MERGE suport fixes - don't build with tooldir /usrusr instead of /usr (#40937) - reserve few .dynamic entries for prelinkingN��EMSJakub Jelinek <jakub@redhat.com>:��- 2.11.90.0.5 - SHF_MERGE support���DM�7Jakub Jelinek <jakub@redhat.com>:ɻ@- 2.11.90.0.4 - fix uleb128 support, so that CVS gcc bootstraps - some ia64 fixesT��CM_Jakub Jelinek <jakub@redhat.com>:��- add -Bgroup support from Ulrich DrepperR��BM[Jakub Jelinek <jakub@redhat.com>:��- hack - add elf_i386_glibc21 emulation8��AM'Jakub Jelinek <jakub@redhat.com>:�@- 2.10.91.0.2���@M�QJakub Jelinek <jakub@redhat.com>:��- 2.10.1.0.7 - remove ExcludeArch ia64 - back out the -oformat, -omagic and -output change for nowF��?MCJakub Jelinek <jakub@redhat.com>::�- Prereq /sbin/install-info7��>M%Jakub Jelinek <jakub@redhat.com>:c�- 2.10.1.0.2E��=MAJakub Jelinek <jakub@redhat.com>:c�- add one more alpha patchi��<M�Jakub Jelinek <jakub@redhat.com>:z�- fix alpha visibility as problem - add support for Ultra-IIIE��;MAJakub Jelinek <jakub@redhat.com>9�A- and one more alpha patch>��:M3Jakub Jelinek <jakub@redhat.com>9�@- two sparc patches6��9M#Jakub Jelinek <jakub@redhat.com>9|/�- 2.10.0.186��8M#Jakub Jelinek <jakub@redhat.com>9i��- 2.10.0.125��7M!Jakub Jelinek <jakub@redhat.com>9WE�- 2.10.0.96��6M#Jakub Jelinek <jakub@redhat.com>9H�@- fix ld -rS��5M]Jakub Jelinek <jakub@redhat.com>9;�@- 2.9.5.0.46 - use _mandir/_infodir/_lib?��4]%Bernhard Rosenkraenzer <bero@redhat.com>9�@- 2.9.5.0.41?��3]%Bernhard Rosenkraenzer <bero@redhat.com>8�e@- 2.9.5.0.34?��2]%Bernhard Rosenkraenzer <bero@redhat.com>8ص�- 2.9.5.0.31l��1S�Cristian Gafton <gafton@redhat.com>8��@- man pages are compressed - apply kingdon's patch from #5031d��0G�Jeff Johnson <jbj@redhat.com>8��@- Permit package to be built with a prefix other than /usr.g��/SCristian Gafton <gafton@redhat.com>8}�@- add pacth from hjl to fix the versioning problems in ldx��.]�Bernhard Rosenkraenzer <bero@redhat.com>8{@- Add sparc patches from Jakub Jelinek <jakub@redhat.com> - Add URL:?��-]%Bernhard Rosenkraenzer <bero@redhat.com>8V1@- 2.9.5.0.22?��,]%Bernhard Rosenkraenzer <bero@redhat.com>8;�@- 2.9.5.0.19?��+]%Bernhard Rosenkraenzer <bero@redhat.com>8�- 2.9.5.0.16j��*O�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- make shared non-pic libraries work on sparc with glibc 2.1. X i� � w � D � q n �y�I�0L� �F � X y��ik� Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-10<��@- don't merge IA-64 unwind info sections together during ld -rm��hiuJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-9<��@- fix DATA_SEGMENT_ALIGN on ia64/alpha/sparc/sparc64r��giJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-8<���- don't crash on SHN_UNDEF local dynsyms (Andrew MacLeod)]��fiUJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-7<�V@- fix bfd configury bug (Alan Modra)� ��ei�QJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-6<��A- don't copy visibility when equating symbols - fix alpha .text/.data with .previous directive bug� ��di�+Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-5<��@- fix SHF_MERGE crash with --gc-sections (#60369) - C++ symbol versioning patch�_��ci�WJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4<v2�- add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs, if DW_EH_PE_absptr cannot be converted that way, don't build the .eh_frame_hdr search tableY��biMJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-3<l�@- fix ld -N broken by last patch�7��ai�Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2<i�- trade one saved runtime page for data segment (=almost always not shared) for up to one page of disk space where possible���`i�;Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-1<c��- update to 2.11.93.0.2 - use %{ix86} instead of i386 for -z combreloc default (#59086)���_m�?Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-10<Y1�- don't create SHN_UNDEF STB_WEAK symbols unless there are any relocations against themc��^wSBill Nottingham <notting@redhat.com> 2.11.92.0.12-9.1<W�@- rebuild (fix ia64 miscompilation):��]E3Tim Powers <timp@redhat.com><<0�- automated rebuild]��\kSJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-8<,^�- two further .eh_frame patch fixes�j��[k�kJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7< �@- as ld is currently not able to shrink input sections to zero size during discard_info, build a fake minimal CIE in that case - update elf-strtab patch to what was commited���Zk�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-6< �@- one more .eh_frame patch fix - fix alpha .eh_frame handling - optimize elf-strtab finalizec��Yk_Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-5<;@- yet another fix for the .eh_frame patchs��XkJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-4<�- Alan Modra's patch to avoid crash if there is no dynobj�W��Wk�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3<�@- H.J.'s patch to avoid crash if input files are not ELF - don't crash if a SHF_MERGE for some reason could not be merged - fix objcopy/strip to preserve SHF_MERGE sh_entsize - optimize .eh_frame sections, add PT_GNU_EH_FRAME support - support anonymous version tags in version scriptX��VkIJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-2<�A- fix IA-64 SHF_MERGE handling�k��Uk�mJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1<�@- update to 2.11.92.0.12 - optimize .dynstr and .shstrtab sections (#55524) - fix ld.1 glitch (#55459) - turn relocs against SHF_MERGE local symbols with zero addend into STT_SECTION + addend - remove man pages for programs not included (nlmconv, windres, dlltool; - add BuildRequires for texinfoc��TiaJakub Jelinek <jakub@redhat.com> 2.11.92.0.7-2;��- duh, fix strings on bfd objects (#55084)���Si� Jakub Jelinek <jakub@redhat.com> 2.11.92.0.7-1;�g@- update to 2.11.92.0.7 - remove .rel{,a}.dyn from output if it is empty���Ri�;Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-2;ʼn�- fix strings patch - use getc_unlocked in strings to speed it up by 50% on large files�P��Qi�9Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1;�8@- update to 2.11.92.0.5 - binutils localization (#45148) - fix typo in REPORT_BUGS_TO (#54325) - support files bigger than 2GB in strings (#54406)���Pk�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-12;��@- on IA-64, don't mix R_IA64_IPLTLSB relocs with non-PLT relocs in .rela.dyn section. � dI � P � � C o��|�X�[��0��P � �4�� k�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8>?�@- alpha TLS fixes - use .debug_line directory table to make the section tiny bit smaller - libtool fix from Jens PetersenG��k'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-7>=@- sparc32 TLSh��~kiJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-6>1*�- s390{,x} TLS and two other mainframe patches���}k�KJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-5>'�@- fix IA-64 TLS IE in shared libs - .{preinit,init,fini}_array compat hack from Alexandre Oliva���|k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-4>&��- IA-64 TLS fixes - fix .plt sh_entsize on Alpha - build with %_smp_mflagsc��{k_Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-3=�@- fix strip on TLS binaries and librariesR��zk=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-2=�V�- fix IA-64 ld bootstrapj��ykmJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-1=�@- update to 2.13.90.0.16 - STT_TLS SHN_UNDEF fix�E��xk�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4=�- pad .rodata.cstNN sections at the end if they aren't sized to multiple of sh_entsize - temporary patch to make .eh_frame and .gcc_except_table sections readonly if possible (should be removed when AUTO_PLACE is implemented) - fix .PPC.EMB.apuinfo section flags�.��wk�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3=��@- fix names and content of alpha non-alloced .rela.* sections (#76583) - delete unpackaged files from the buildrootk��vkoJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-2=�@- enable s390x resp. s390 emulation in linker too�0��uk�wJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1=���- update to 2.13.90.0.10 - add a bi-arch patch for sparc/s390/x86_64 - add --enable-64-bit-bfd on sparc, s390 and ppcQ��ti=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-3=�k�- fix combreloc testcase�F��si�%Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2=�k�- fix orphan .rel and .rela section placement with -z combreloc (Alan Modra) - skip incompatible linker scripts when searching for libraries�N��ri�5Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1=��@- update to 2.13.90.0.4 - x86-64 TLS support - some IA-32 TLS fixes - some backported patches from trunk - include opcodes, ld, gas and bfd l10n too�O��qi�7Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3=��@- allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff - clear memory at *r_offset of dynamic relocs on PPC - avoid ld crash if accessing non-local symbols through LE relocs - new IA-32 TLS relocs, bugfixes and testcases - use brl insn on IA-64 (Richard Henderson) - fix R_IA64_PCREL21{M,F} handling (Richard Henderson) - build in separate builddir, so that gasp tests don't fail - include localization]��piUJakub Jelinek <jakub@redhat.com> 2.13.90.0.2-2=R]@- fix R_386_TPOFF32 addends (#70824)�}��oi�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1=K�- update to 2.13.90.0.2 - fix ld TLS assertion failure (#70084) - fix readelf --debug-dump= handling to match man page and --help (#68997) - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)�%��nk�aJakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1=>��- update to 2.12.90.0.15 - TLS .tbss fix - don't use rpm %configure macro, it is broken too often (#69366)���mi�7Jakub Jelinek <jakub@redhat.com> 2.12.90.0.9-1<�@- update to 2.12.90.0.9 - TLS support - remove gasp.info from %post/%preun (#65400)a��li]Jakub Jelinek <jakub@redhat.com> 2.12.90.0.7-1<�5�- update to 2.12.90.0.7 - run make check���kk�CJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12<�5�- fix .hidden handling on SPARC (Richard Henderson) - don't crash when linking -shared non-pic code with SHF_MERGE - fix .eh_frame_hdr for DW_EH_PE_aligned - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs���jk�EJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-11<���- don't emit dynamic R_SPARC_DISP* relocs against STV_HIDDEN symbols into shared libraries � �t � A � R � R��$�m��&�l��8 � �"�� i�]Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9>�@- ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend and the other relocs have *r_offset == 0�2��i�}Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8>��@- remove some unnecessary provides in ppc64 linker script which were causing e.g. empty .ctors/.dtors section creation�0��i�yJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7>�@- some CFI updates/fixes - don't create dynamic relocations against symbols defined in PIE exported from its .dynsymh��ikJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-6>��@- update gas to 20030604 - PT_GNU_STACK supportX��iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-5>�<@- buildrequire gettext (#91838)p��i{Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-4>ؙ@- fix shared libraries with >= 8192 .plt slots on ppc32B��i Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-3>�A- rebuilt�@��i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2>�@- rename ld --dynamic option to --pic-executable or --pie - fix ld --help output - document --pie/--pic-executable in ld.info and ld.1� ��i�YJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1>Ԥ�- update to 2.14.90.0.4-1 - gas CFI updates (Richard Henderson) - dynamic executables (Ulrich Drepper)���i� Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-2>��- fix ELF visibility handling - tidy plt entries on IA-32, ppc and ppc64R��i?Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-1>��@- update to 2.14.90.0.2-1l��kqJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-8>��@- fix bfd_elf_hash on 64-bit arches (Andrew Haley)C��k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-7>���- rebuilt���k�EJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-6>���- optimize DW_CFA_advance_loc4 in gas even if there is 'z' augmentation with size 0 in FDEK��k/Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-5>��@- fix SPARC build�.�� k�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4>�"@- fix ppc32 plt reference counting - don't include %{_prefix}/%{_lib}/debug in the non-debuginfo package (#87729)� �� k�-Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-3>�-�- make elf64ppc target native extra on ppc and elf32ppc native extra on ppc64._�� kWJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-2>�9@- fix TLS on IA-64 with ld relaxationR�� k=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-1>|P@- update to 2.13.90.0.20C�� k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-9>Z B- rebuilt���k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-8>Z A- don't strip binaries in %install, so that there is non-empty debuginfoa��k[Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-7>Z @- don't optimize .eh_frame during ld -r�F��k�#Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6>K��- don't clear elf_link_hash_flags in the .symver patch - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME (Alan Modra)���k�'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5>G�B- fix the previous .symver change - remove libbfd.so and libopcodes.so symlinks, so that other packages link statically, not dynamically against libbfd and libopcodes whose ABI is everything but stable���k� Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-4>G�A- do .symver x, x@FOO handling earlier - support .file and .loc on s390*�N��k�3Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3>G�@- handle .symver x, x@FOO in ld such that relocs against x become dynamic relocations against x@FOO (#83325) - two PPC64 TLS patches (Alan Modra)���k�=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2>FB�- fix SEARCH_DIR on x86_64/s390x - fix Alpha --relax - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt and no .rela.dyn section - support IA-32 on IA-64 (#83752) - .eh_frame_hdr fix (Andreas Schwab)p��kyJakub Jelinek <jakub@redhat.com> 2.13.90.0.18-1>BN@- update to 2.13.90.0.18 + 20030121->20030206 CVS diff � �O< � @ � � � � V � �`����~�A�+�m �] � �F��;i�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2@�A- fix testcases on AMD64 - fix .got's sh_entsize on IA32/AMD64 - set COMMONPAGESIZE on s390/s390x - set COMMONPAGESIZE on ppc32 (Alan Modra)P��:i;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-1@�@- update to 2.14.90.0.8X��9iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-4@�- fix -z relro on 64-bit arches\��8iSJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-3@�@- fix some bugs in -z relro supportf��7igJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-2?���- -z relro support, reordering of RW sectionsP��6i;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.7-1?���- update to 2.14.90.0.7� ��5i�WJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4?��- fix assembly parsing of foo=(.-bar)/4 (Alan Modra) - fix IA-64 assembly parsing of (p7) hint @pausen��4iwJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-3?yp@- don't abort on some linker warnings/errors on IA-64l��3isJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-2?lAA- fix up merge2.s to use .p2align instead of .align�H��2i�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1?lA@- update to 2.14.90.0.6 - speed up string merging (Lars Knoll, Michael Matz, Alan Modra) - speed up IA-64 local symbol handling during linking��1i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-7?Xz�- avoid ld -s segfaults introduced in 2.14.90.0.5-5 (Dmitry V. Levin,� ��0i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-6?O@@- build old demangler into libiberty.a (#102268) - SPARC .cfi* supportW��/iIJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-5?/�@- fix orphan section placement�5��.i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4?&a�- fix ppc64 elfvsb linker tests - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols type and size (Alan Modra)_��-iYJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-3?&a�- fix 64-bit unclean code in ppc-opc.c^��,iWJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-2?%A- fix 64-bit unclean code in tc-ppc.cr��+iJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-1?%@- update to 2.14.90.0.5 - fix ld -r on ppc64 (Alan Modra)C��*k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-23?�@- rebuilt�I��)k�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22?��- fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661) - don't access memory beyond what was allocated in readelf (Richard Henderson)g��(kgJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-21? U@- add .cfi_* support on ppc{,64} and s390{,x}_��'kWJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-20? �@- remove lib{bfd,opcodes}.la (#98190)�g��&k�eJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19? `�- fix -pie support on amd64, s390, s390x and ppc64 - issue relocation overflow errors for s390/s390x -fpic code when accessing .got slots above 4096 bytes from .got startC��%k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-18?�- rebuilt�&��$k�cJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17?�- fix ia64 -pie support - require no undefined non-weak symbols in PIEs like required for normal binaries�$��#k�_Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16?�@- fix readelf -d on IA-64 - build libiberty.a with -fPIC, so that it can be lined into shared librariesC��"k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-15>���- rebuilt�0��!k�wJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14>���- added support for Intel Prescott instructions - fix hint@pause for ia64 - add workaround for LTP sillyness (#97934)�G�� k�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13>�T@- update CFI stuff to 2003-06-18 - make sure .eh_frame is aligned to 8 bytes on 64-bit arches, remove padding within one .eh_frame sectionC�� k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-12>��- rebuilt[�� kOJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-11>��- one more fix for the same patchN�� k5Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-10>��- fix previous patch I �S �5 { # h � a � . � �#�����sR � I l��WisJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5AvS@- fix --just-symbols on ppc64 (Alan Modra, #135498)���Vi�AJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-4Ao��- fix code detecting matching linkonce and single member comdat group sections (#133078)� ��Ui�QJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3Aju�- revert Sep 09 change to make ppc L second argument e.g. for tlbie non-optional - fix stripping of prelinked binaries and libraries (#133734) - allow strings(1) on 32-bit arches to be used again with > 2GB files (#133555)���Ti�7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-2Aa;@- update to 2.15.92.0.2 - change ld's ld.so.conf parser to match ldconfig's (#129340)�v��Si�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9AN�@- avoid almost 1MB (sparse) gaps in the middle of -z relro libraries on x86-64 (Andreas Schwab) - fix -z relro to make sure end of PT_GNU_RELRO segment is always COMMONPAGESIZE aligned�7��Ri�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8A#D�- fix linker segfaults on input objects with SHF_LINK_ORDER with incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)�=��Qi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7A#D�- resolve all undefined ppc64 .* syms to the function bodies through .opd, not just those used in brach instructions (Alan Modra)^��PiWJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-6A!�A- fix ppc64 ld --dotsyms (Alan Modra)� ��Oi�-Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5A!�@- various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra) - fix --gc-sections - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for .gnu.linkonce.t.* function doesn't need unwind info�A��Ni�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4A ��- kill ppc64 dot symbols (Alan Modra) - objdump -d support for objects without dot symbols - support for overlapping ppc64 .opd entriesh��MikJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-3Ag@- fix a newly introduced linker crash on x86-64r��L]� Alan Cox <alan@redhat.com> 2.15.91.0.2-2A�- BuildRequire bison and macroise buildroot - from Steve Grubbn��KiwJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-1A 8@- update to 2.15.91.0.2 - BuildRequire flex (#117763)� ��Ji�1Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-7@�L@- use lib64 instead of lib directories on ia64 if %{_lib} is set to lib64 by rpm� ��Ii�3Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-6@�@- fix a bug introduced in the ++/-- rejection patch from 2.15.90.0.3 (Alan Modra)y��Hi� Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-5@���- fix s390{,x} .{,b,p2}align handling - ppc/ppc64 testsuite fix�1��Gi�{Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4@�4@- -z relro ppc/ppc64/ia64 fixes - change x86-64 .plt symbol st_size handling to match ia32 - prettify objdump -d outputN��Fi7Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-3@��- several SPARC fixes]��EiUJakub Jelinek <jakub@redhat.com> 2.15.90.0.3-2@�m�- yet another fix for .tbss handlingP��Di;Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-1@�- update to 2.15.90.0.3�6��Cm�Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2@dA- update to 20040326 CVS - fix ppc64 weak .opd symbol handling (Alan Modra, #119086) - fix .tbss handling bug introducedT��Bm?Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-1@d@- update to 2.15.90.0.1.1�5��Ai�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8@7H@- with -z now without --enable-new-dtags create DT_BIND_NOW dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit setL��@i3Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-7@5��- fix -pie on ppc32���?i�=Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-6@5��- clear .plt sh_entsize on sparc32 - put whole .got into relro area with -z now -z relro3��>K Elliot Lee <sopwith@redhat.com>@,�@- rebuiltK��=i1Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-4@�@- fix -pie on IA64Z��<iOJakub Jelinek <jakub@redhat.com> 2.14.90.0.8-3@ �- fix testcases on s390 and s390x D �/ � o � f � a � e�@����d�D �� 8 � D m��qooAlexandre Oliva <aoliva@redhat.com> 2.16.91.0.6-4D�- fix relaxation of TLS GD to LE on PPC (#184590)��pi�Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-3D/�- support DW_CFA_val_{offset,offset_sf,expression} in readelf/objdump�_��oi�WJakub Jelinek <jakub@redhat.com> 2.16.91.0.6-2D;@- add MNI support on i?86/x86_64 (#183080) - support S signal frame augmentation flag in .eh_frame, add .cfi_signal_frame support (#175951, PR other/26208, BZ#300)�L��ni�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-1C��@- update to 2.16.91.0.6 - fix ppc64 --gc-sections - disassembler fixes for x86_64 cr/debug regs - fix linker search order for DT_NEEDED libs�!��mi�[Jakub Jelinek <jakub@redhat.com> 2.16.91.0.5-1C��- update to 2.16.91.0.5 - don't error about .toc1 references to discarded sectiosn on ppc64 (#175944)r��liJakub Jelinek <jakub@redhat.com> 2.16.91.0.3-2C� @- put .gnu.linkonce.d.rel.ro.* sections into relro region7��kS Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��ji�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.3-1Ct��- update to 2.16.91.0.3 - add .weakref support (Alexandre Oliva, #115157, #165728)� ��ii�-Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-4Cx@- install-info also configure.info - update standards.texi from gnulib (#165530)���hi�;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-3C�@- update to 20050816 CVS - better fix for ld-cdtest - fix symbol version script parsing�%��gi�cJakub Jelinek <jakub@redhat.com> 2.16.91.0.2-2B�@- don't complain about relocs to discarded sections in ppc32 .got2 sections (Alan Modra, PR target/17828)P��fi;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-1B��- update to 2.16.91.0.2�n��ei�uJakub Jelinek <jakub@redhat.com> 2.16.91.0.1-3Bߎ@- fix buffer overflow in readelf ia64 unwind printing code - use vsnprintf rather than vsprintf in gas diagnostics (Tavis Ormandy) - fix ld-cdtest when CFLAGS contains -fexceptionsQ��di=Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-2B�<�- update to 20050720 CVSb��ci_Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-1B�_@- update to 2.16.91.0.1 plus 20050708 CVS�:��bi� Jakub Jelinek <jakub@redhat.com> 2.16.90.0.3-1B�@- update to 2.16.90.0.3 - update to 20050615 CVS - ppc32 secure PLT support (Alan Modra) - further bfd/readelf robustificationq��amyJakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-4B��@- further bfd robustification (CAN-2005-1704, #158680)���`m�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-3B���- further objdump and readelf robustification (CAN-2005-1704, #158680)v��_m�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-2B�h�- bfd and readelf robustification (CAN-2005-1704, #158680)���^m�!Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-1BIC@- update to 2.15.94.0.2.2 - speed up walk_wild_section (Robert O'Callahan)M��]i5Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-4B,B@- rebuilt with GCC 4�3��\i�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-3B#�- fix buffer overflows in readelf (#149506) - move c++filt to binutils from gcc-c++, conflict with gcc-c++ < 4.0 (#86333)�\��[i�QJakub Jelinek <jakub@redhat.com> 2.15.94.0.2-1B L�- update to 2.15.94.0.2 - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296) - fix stripping of binaries/libraries that have empty sections right before .dynamic section (with the same starting address; #144038) - handle AS_NEEDED (...) in linker script INPUT/GROUP[��ZkOJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-11A��- fix a longstanding -z relro bug�v��Yk�Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-10A��@- avoid unnecessary gap with -z relro showing on i686 libc.so - ppc64 --emit-relocs fix (Alan Modra) - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS, as created by nasm; #142181) - don't try to make absptr LSDAs relative if they don't have relocations against them (Alan Modra, #141162)R��Xq7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5.EL4A��- fix ar xo (#104344) � Y? � $ � � / � �)�)a�� D��4 � � R�� k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-1F�Q@- update to 2.17.50.0.17R�� k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.16-1Fn��- update to 2.17.50.0.16x�� k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.12-4F �@- fix linking non-ELF input objects into ELF output (#235747)���k�MJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-3E��- don't require matching ELF_OSABI for target vecs with ELFOSABI_NONE, only prefer specific osabi target vecs over the generic ones (H.J.Lu, #230964, BZ#3826) - build libbfd.so and libopcodes.so with -Bsymbolic-functionsp��kyJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-2E��- ignore install-info errors from scriptlets (#223678)�U��k�AJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-1E�@- update to 2.17.50.0.12 - revert the misdesigned LD_SYMBOLIC{,_FUNCTIONS} env var support, only support -Bsymbolic/-Bsymbolic-functions/--dynamic-list*d��icJakub Jelinek <jakub@redhat.com> 2.17.50.0.9-1E�2@- update to 2.17.50.0.9 - fix tekhex reader]��iUJakub Jelinek <jakub@redhat.com> 2.17.50.0.8-2E�@- fix --as-needed on ppc64 (#219629)v��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.8-1Er�@- update to 2.17.50.0.8 - initialize frch_cfi_data (BZ#3607)�C��i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.7-1Ep@- update to 2.17.50.0.7 - .cfi_personality and .cfi_lsda directives, per subsection .cfi_* directives, better .eh_frame CIE merging~��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-3ES@- fix popcnt instruction assembly and disassembly on amd64 (#214767)�y�� i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-2E<��- update to 2.17.50.0.6 - fix for section relative linker script defined symbols in empty sections (#207598, BZ#3267) - fix handling of DW_CFA_set_loc in .eh_frame optimizations - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation handling with weak undefined symbols (Alan Modra, #211094)l��isJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-6E�A- fix multilib conflict in %{_prefix}/include/bfd.hk��~iqJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-5E�@- fix efi-app-ia64 magic number (#206002, BZ#3171)� ��}i�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-4D�f�- link libopcodes*.so against libbfd*.so (#202327) - split *.a and header files into binutils-devel� ��|i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-3D�- on ppc and ppc64 increase default -z commonpagesize to 64K (#203001)� ��{o�-Alexandre Oliva <aoliva@redhat.com> 2.17.50.0.3-2D�@- do not infer x86 arch implicitly based on instruction in the input (#200330)P��zi;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-1D�{�- update to 2.17.50.0.3�|��yi�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-8D��@- add support for new AMDFAM10 instructions (#198281, IT#97662) - add -march=/-mtune= gas support on x86/x86-64 - x86/x86-64 nop insn improvements - fix DT_GNU_HASH shift count value computation� ��xi�+Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-7D���- add DT_GNU_HASH support (--hash-style=gnu and --hash-style=both ld options)|��wi�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-4D���- fix i?86 TLS GD->IE transition in executables (#196157, BZ#2513)�)��vi�kJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-3D���- fix two places in ld that misbehaved with MALLOC_PERTURB_=N - fix .tls_common handling in relocatable linkingi��uimJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-2D� �- fix --as-needed (Alan Modra, #193689, BZ#2721)�A��ti�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-1D~�- update to 2.17.50.0.2 - update from CVS to 20060601 - speed up the ELF linker by caching the result of kept section check (H.J. Lu)P��si;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.1-1D`�@- update to 2.17.50.0.1�"��ri�]Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-6D-�- fix ld error message formatting, so that collect2 parser can parse it again for g++ -frepo (#187142) � �Ro � a � � + � j � E�O��h � �l�� }�]Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-2H�N@- Package review, analysed by Jon Ciesla and Patrice Dumas (BZ 225615). - build back in the sourcedir without problems as gasp is no longer included. - Fix the install-info requirement. - Drop the needless gzipping of the info files. - Provide Obsoletes versions. - Use the %configure macro.�Y�� }�7Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-1H�6@- Update to 2.18.50.0.9. - Drop the ppc-only spu target pre-build stage (BZ 455242). - Drop parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - New .spec BuildRequires zlib-devel (/-static) for compressed sections. - Update .spec Buildroot to be more unique.�R�� }�)Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-2H���- Fix parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - Turn on 64-bit BFD support for i386, globally enable AC_SYS_LARGEFILE. - `--with debug' builds now with --disable-shared. - Removed a forgotten unused ld/eelf32_spu.c workaround from 2.18.50.0.8-1.�F��}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-1H��@- Update to 2.18.50.0.8. - Drop the .clmul -> .pclmul renaming backport. - Add %{binutils_target} macro to support building cross-binutils. (David Woodhouse) - Support `--without testsuite' to suppress the testsuite run. - Support `--with debug' to build without optimizations. - Refresh the patchset with fuzz 0 (for new rpmbuild). - Enable the spu target on ppc/ppc64 (BZ 455242).�@��}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-4H}�- include the `dist' tag in the Release number - libbfd.a symbols visibility is now hidden (for #447426, suggested by Jakub)���}�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-3H}�- rebuild libbfd.a with -fPIC for inclusion into shared libraries (#447426)^��iWJakub Jelinek <jakub@redhat.com> 2.18.50.0.6-2G�^@- backport .clmul -> .pclmul renamingw��i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.6-1G�@- update to 2.18.50.0.6 - Intel AES, CLMUL, AVX/FMA support�%��i�cJakub Jelinek <jakub@redhat.com> 2.18.50.0.4-2G��@- revert aranges optimization (Alan Modra, BZ#5303, BZ#5755) - fix ld-shared testcase for GCC 4.3 (H.J. Lu)P��i;Jakub Jelinek <jakub@redhat.com> 2.18.50.0.4-1G��- update to 2.18.50.0.4i���?Fedora Release Engineering <rel-eng@fedoraproject.org> 2.18.50.0.3-2G��- Autorebuild for GCC 4.3~��i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.3-1G_�@- update to 2.18.50.0.3 - fix build with recent makeinfo (#415271)�D��k� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.18-1F�<@- update to 2.17.50.0.18 - GPLv3+ - preserve .note.gnu.build-id in objcopy --only-keep-debug (#251935) - fix sparc64/alpha broken by --build-id patch (#252936) - update License tag - fix ld crash with --build-id and non-ELF output format (Alan Modra, BZ#4923)g��kgJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-7F�$@- fix ppc32 secure PLT detection (Alan Modra)� ��k�1Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-6F�;@- rebuilt to make sure even libbfd.so and libopcodes.so aren't broken by #249435x��k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-5F��- add .note.gnu.build-id into default linker script (#249435)�^��k�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-4F��- don't kill the %{_gnu} part of target name on arm (Lennert Buytenhek, #243516) - create just one PT_NOTE segment header for all consecutive SHT_NOTE sectionsS�� o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-3F� �- fix for ld --build-idS�� o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-2F� @- ld --build-id support k 5 � e � ��]�%�d�d���� �'� k �"��8k�[Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�@- Rebase sources on 2.19.51.0.13 tarball. Remove redundant orphan section placement patch. (BZ 512937)���7k�3Nick Clifton <nickc@redhat.com> 2.19.51.0.11-27J\sB- Add patch to allow moxie target to build, and hence --enable-targets=all to work.~��6k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-26J\sA- Import orphan section placement patch from mainline. (BZ 510384)x��5k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-25J\s@- Fix build-id patch to avoid memory corruption. (BZ 501582)y��4�sJan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.11-24JX~�- Provide uuencode output of the testsuite results.g��3kgNick Clifton <nickc@redhat.com> 2.19.51.0.11-23JI�@- Rebase sources on the 2.19.51.0.11 tarball.g��2kgNick Clifton <nickc@redhat.com> 2.19.51.0.10-22J?r@- Rebase sources on the 2.19.51.0.10 tarball.���1i�'Nick Clifton <nickc@redhat.com> 2.19.51.0.2-21J0�- Do not attempt to set execute permission on non-regular files. (BZ 503426)q��0k{Jakub Jelinek <jakub@redhat.com> 2.19.51.0.2-20J.N�- Fix .cfi_* skip over >= 64KB of code. (PR gas/10255)i��/imNick Clifton <nickc@redhat.com> 2.19.51.0.2-19J +@- Import fix for binutils PR #9938. (BZ 500295)��.i�Nick Clifton <nickc@redhat.com> 2.19.51.0.2-18I��@- Update IBM Power 7 support patch to fix tlbilx opcode. (BZ 494718)y��-i� Nick Clifton <nickc@redhat.com> 2.19.51.0.2-17I���- Add glibc-static to BuildRequires when running the testsuite._��,iYNick Clifton <nickc@redhat.com> 2.19.51.0.2-16I���- Add IBM Power7 support. (BZ 487887)Z��+iONick Clifton <nickc@redhat.com> 2.19.51.0.2-15I��@- Add IFUNC support. (BZ 465302)� ��*�'�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.2-14I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���)�%Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.2-13I���- Rediff the symbolic-envvar-revert patch to comply with rpm patch --fuzz=0.� ��(i�SNick Clifton <nickc@redhat.com> 2.19.51.0.2-12I��- Rebase sources on 2.19.51.0.2 tarball. Remove linkonce-r-discard and gcc-expect-table patches.���'�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.1-11I��@- Fix .eh_frame_hdr build also for .gcc_except_table LSDA refs (BZ 461675).���&i�!Nick Clifton <nickc@redhat.com> 2.19.50.0.1-10Iy�@- Only require dejagnu if the testsuites are going to be run. (BZ 481169)� ��%g�WNick Clifton <nickc@redhat.com> 2.19.50.0.1-8I1.�- Add build-id patch to ensure that section contents are incorporated into a build id. (BZ 472152)� ��$c�_Nick Clifton <nickc@redhat.com> 2.19.50.0.1I&��- Rebase sources on 2.19.50.0.1 tarball. Update all patches, trimming those that are no longer needed.�6��#}�qJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-7I ��- Fix %{_prefix}/include/bfd.h on 32-bit hosts due the 64-bit BFD target support from 2.18.50.0.8-2 (BZ 468495).�e��"}�OJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-6I ��- binutils-devel now requires zlib-devel (BZ 463101 comment 5). - Fix complains on .gnu.linkonce.r relocations to their discarded .gnu.linkonce.t counterparts.� ��!}� Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-5H�- Remove %makeinstall to comply with the spu-binutils review (BZ 452211).��� }�-Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-4H�- Fix *.so scripts for multilib linking (BZ 463101, suggested by Jakub Jelinek).�F�� }�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-3H�7@- Provide libbfd.so and libopcodes.so for automatic dependencies (BZ 463101). - Fix .eh_frame_hdr build on C++ files with discarded common groups (BZ 458950). - Provide --build and --host to fix `rpmbuild --target' biarch builds. - Include %{binutils_target}- filename prefix for binaries for cross builds. - Fix multilib conflict on %{_prefix}/include/bfd.h's BFD_HOST_64BIT_LONG_LONG. � r�< � � ) t � L � o �>�>�8�#�[�M � � ��Qk�UNick Clifton <nickc@redhat.com> - 2.20.51.0.7-5L+1�- Rename the binutils-static package to binutils-devel in line with the Fedora packaging guidelines.�$��Pk�_Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-4L�@- Allow GOLD linker to parse "-l<name>" directives inside INPUT statements in linker scripts. (BZ 600553)a��Ok[Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-3K� @- Allow unique symbols in archive maps.���Nk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-2K͗@- Merge binutils-devel package into binutils-static package. (BZ 576300)�:��Mk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-1K��@- Rebase on 2.20.51.0.7 tarball. - Delete redundant patches: binutils-2.20.51.0.2-add-needed.patch, binutils-2.20.51.0.2-do-not-set-ifunc.patch, binutils-2.20.51.0.2-enable-gold.patch, binutils-2.20.51.0.2-gas-expr.patch, binutils-2.20.51.0.2-ifunc-ld-s.patch, binutils-2.20.51.0.2-lwp.patch, binutils-2.20.51.0.2-ppc-hidden-plt-relocs.patch, binutils-2.20.51.0.2-x86-hash-table.patch, - Do not allow unique symbols to be bound locally. (PR ld/11434) - Add support for DWARF4 debug information.���Lm�?Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-17K���- Do not set ELFOSABI_LINUX on binaries which just link to IFUNC using DSOs. (BZ 568941)w��Km�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-16K���- Copy the OSABI field in ELF headers, if set. (BZ 568921)y��Jm�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-15KuB�- Create separate static and devel sub-packages. (BZ 556040)���Im� Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-14Kh�- Fix seg-fault when linking mixed x86 and x86_64 binaries. (BZ 487472)n��HmsNick Clifton <nickc@redhat.com> - 2.20.51.0.2-13KY�@- Add a requirement for the coreutils. (BZ 557006)� ��Gm�'Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-12KV�@- Fix --no-copy-dt-needed so that it will not complain about weak references.`��FmWNick Clifton <nickc@redhat.com> - 2.20.51.0.2-11K+n�- Add missing part of PR 11088 patch.c��Em]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-10K* @- Apply patch for PR 11088. (BZ 544149)b��Dk]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-9K �@- Apply patch for PR 10856. (BZ 544358)x��Cq�Roland McGrath <roland@redhat.com> - 2.20.51.0.2-8K@- Build gold only for x86 flavors until others are tested.]��BqMRoland McGrath <roland@redhat.com> - 2.20.51.0.2-7K �- Add support for building gold.t��Ai�Jakub Jelinek <jakub@redhat.com> 2.20.51.0.2-5J�A- Fix up --copy-dt-needed-entries default. (Nick Clifton)�+��@i�oJakub Jelinek <jakub@redhat.com> 2.20.51.0.2-4J�@- Fix ld -s with IRELATIVE relocations. (BZ 533321, PR ld/10911) - Add AMD Orochi LWP support, fix FMA4 support.�0��?g�{Nick CLifton <nickc@redhat.com> 2.20.51.0.2-3J�@- Rename --add-needed to --copy-dt-needed-entries and improve error message about unresolved symbols in DT_NEEDED DSOs.�.��>}�aJan Kratochvil <jan.kratochvil@redhat.com> 2.20.51.0.2-2J��- Fix rpm --excludedocs (BZ 515922). - Fix spurious scriplet errors by `exit 0'. (BZ 517979, Nick Clifton)�H��=g�+Nick Clifton <nickc@redhat.com> 2.20.51.0.2-1J�@- Rebase on 2.20 tarball. - Remove redundant moxie patch. - Remove redundant unique is global patch. - Remove redundant cxxfilt java doc patch.���<��Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.14-32J���- Remove spurious description of nonexistent --java switch for cxxfilt.���;m�1Jakub Jelinek <jakub@redhat.com> 2.19.51.0.14-31Jz�- Fix strip on objects with STB_GNU_UNIQUE symbols. (BZ 515700, PR binutils/10492)� ��:�)�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.14-30Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild� ��9k�)Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�A- Rebase sources on 2.19.51.0.14 tarball. Gain fixes for PRs 10429 and 10433. � ^�b � � w � ~ � � b�� �O��3�'�;�Q�b � �1��qk�yNick Clifton <nickc@redhat.com> - 2.22.52.0.1-1O))@- Rebase on 2.22.52 release. - Remove build-id.patch and gold-casts.patch as they are included in the 2.22.52 sources.~��p]�!Nick Clifton <nickc@redhat.com> - 2.22-4O �- Fix bug in GOLD sources parsing signed integers in command line options.i��o]yNick Clifton <nickc@redhat.com> - 2.22-3O �- Add casts for building gold with 4.7 version of gcc.���n��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.22-2O�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildL��m]?Nick Clifton <nickc@redhat.com> - 2.22-1Nˎ�- Rebase on 2.22 release.a��luQRicky Zhou <ricky@fedoraproject.org> - 2.21.53.0.2-2N��@- Rebuild libopcodes.a with -fPIC.���kk�Nick Clifton <nickc@redhat.com> - 2.21.53.0.2-1NA!@- Rebase on 2.21.53.0.2 tarball. Delete unneeded patches. (BZ 728677)e��jkcNick Clifton <nickc@redhat.com> - 2.21.53.0.1-3N7�- Update libiberty demangling. (BZ 727453)� ��ik�SNick Clifton <nickc@redhat.com> - 2.21.53.0.1-2N/��- Import Jakub Jelinek's patch to add support for displaying the contents of .debug_macro sections.���hk�Nick Clifton <nickc@redhat.com> - 2.21.53.0.1-1N%q�- Rebase on 2.21.53.0.1 tarball. Delete unneeded patches. (BZ 712668)W��gkGNick Clifton <nickc@redhat.com> - 2.21.52.0.1-5N|A- Import fix for PR ld/12921.� ��fk�SNick Clifton <nickc@redhat.com> - 2.21.52.0.1-4N|@- Run "alternatives --auto" to restore ld symbolic link if it was manually configured. (BZ 661247)���ek�;Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-3M��@- Fix seg-fault attempting to find a function name without a symbol table. (BZ 713471)b��dk]Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-2M�@- Import fix for PR ld/12851 (BZ 711268)g��ckgNick Clifton <nickc@redhat.com> - 2.21.52.0.1-1M�- Rebase on 2.21.52.0.1 tarball. (BZ 712025)g��bkgNick Clifton <nickc@redhat.com> - 2.21.51.0.9-1M�c@- Rebase on 2.21.51.0.9 tarball. (BZ 703105)W��aw;Peter Robinson <pbrobinson@gmail.com> - 2.21.51.0.8-3M���- Add ARM to BFD checksx��`k�Nick Clifton <nickc@redhat.com> - 2.21.51.0.8-2M��A- Delete plugins patch - enable plugins via configure option.Z��_kMNick Clifton <nickc@redhat.com> - 2.21.51.0.8-1M��@- Rebase on 2.21.51.0.8 tarball.Z��^kMNick Clifton <nickc@redhat.com> - 2.21.51.0.7-1M���- Rebase on 2.21.51.0.7 tarball.]��]kSNick Clifton <nickc@redhat.com> - 2.21.51.0.6-2Mv@- Enable gold plugins. (BZ 682852)Z��\kMNick Clifton <nickc@redhat.com> - 2.21.51.0.6-1MS�@- Rebase on 2.21.51.0.6 tarball.� ��[�%�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.21.51.0.5-4MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��ZmeJakub Jelinek <jakub@redhat.com> - 2.21.51.0.5-3MB��- Readd --build-id fix patch. (PR ld/12451)� ��Ye�/Dan Horák <dan[at]danny.cz> - 2.21.51.0.5-2M%��- fix build on non-gold arches like s390(x) where both ld and ld.bfd is installed�$��Xk�_Nick Clifton <nickc@redhat.com> - 2.21.51.0.5-1M$]@- Rebase on 2.21.51.0.5 tarball. - Delete redundant patches. - Fix gold+ld configure command line option.d��WgeDan Horák <dan[at]danny.cz> - 2.20.51.0.12-2L��- "no" is not valid option for --enable-goldi��VmiNick Clifton <nickc@redhat.com> - 2.20.51.0.12-1L�e�- Rebase on 2.20.51.0.12 tarball. (BZ 582160)i��UmiNick Clifton <nickc@redhat.com> - 2.20.51.0.11-1L� �- Rebase on 2.20.51.0.11 tarball. (BZ 631771)���Tm�#Nick Clifton <nickc@redhat.com> - 2.20.51.0.10-3LnnA- Allow ^ and ! characters in linker script wildcard patterns. (BZ 621742)l��SmoNick Clifton <nickc@redhat.com> - 2.20.51.0.10-2Lnn@- Fix seg fault in sec_merge_emit(). (BZ 623687)� ��Rm�ONick Clifton <nickc@redhat.com> - 2.20.51.0.10-1La?@- Rebase on 2.20.51.0.10 tarball. - Import GOLD sources from binutils mainline as of 10 Aug 2010. P ��6 � v � � � B � N�����t�[H�J�-�f � P ���k�ANick Clifton <nickc@redhat.com> - 2.23.51.0.5-1P�6@- Rebase on 2.23.51.0.5 release. (#876141) - Retire binutils-2.23.51.0.3-arm-ldralt.patchx��k�Nick Clifton <nickc@redhat.com> - 2.23.51.0.3-3P���- Rename ARM LDRALT instruction to LDALT. (#869025) PR/14575Z�� oIJon Ciesla <limburgher@gmail.com> - 2.23.51.0.3-2P{��- Provides: bundled(libiberty)e�� kcNick Clifton <nickc@redhat.com> - 2.23.51.0.3-1Pj�@- Rebase on 2.23.51.0.3 release. (#858560)�1�� k�yNick Clifton <nickc@redhat.com> - 2.23.51.0.2-1PO'�- Rebase on 2.23.51.0.2 release. (#856119) - Retire binutils-2.23.51.0.1-gold-keep.patch and binutils-rh805974.patch.c�� [oJeff Law <law@redhat.com> 2.23.51.0.1-4PE�@- Correctly handle PLTOFF relocs for s390 IFUNCs.{�� k� Karsten Hopp <karsten@redhat.com> 2.23.51.0.1-3P*=�- apply F17 commit cd2fda5 to honour {powerpc64} macro (#834651){��k� Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-2P*=�- Make GOLD honour KEEP directives in linker scripts (#8333355)���k�3Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-1P"T�- Rebase on 2.23.51.0.1 release. (#846433) - Retire binutils-2.22.52.0.4-dwz.patch, binutils-2.22.52.0.4-ar-4Gb.patch, binutils-2.22.52.0.4-arm-plt-refcount.patch, binutils-2.22.52.0.4-s390-64bit-archive.patch.���k�'Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-8Pk�- Make the binutils-devel package depend upon the binutils package. (#845082)���k�%Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-7Pk�- Disable checks that config.h is included before system headers. (#845084)y��k� Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-6PS�- Use 64bit indicies in archives for s390 binaries. (#835957)���k�=Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-5O���- Catch attempts to create a broken symbol index with archives > 4Gb in size. (#835957)_��kWNick Clifton <nickc@redhat.com> - 2.22.52.0.4-4O�- Import fix for ld/14189. (#829311)���k�GNick Clifton <nickc@redhat.com> - 2.22.52.0.4-3O�- Fix handling of archives > 4Gb in size by importing patch for PR binutils/14302. (#835957)X�� mGJakub Jelinek <jakub@redhat.com> - 2.22.52.0.4-2O�i�- Add minimal dwz -m support.e��kcNick Clifton <nickc@redhat.com> - 2.22.52.0.4-1O�F@- Rebase on 2.22.52.0.4 release. (#829027)e��~kcNick Clifton <nickc@redhat.com> - 2.22.52.0.3-1O� �- Rebase on 2.22.52.0.3 release. (#819823)���}k�#Nick Clifton <nickc@redhat.com> - 2.22.52.0.2-1O�~�- Rebase on 2.22.52.0.2 release. (#816514) - Retire binutils-2.22.52.0.1-weakdef.patch, binutils-2.22.52.0.1-ld-13621.patch, binutils-rh797752.patch, binutils-2.22.52.0.1-x86_64-hidden-ifunc.patch, binutils-2.22.52.0.1-tsx.patch and binutils-2.22.52.0.1-hidden-ifunc.patch. - Update binutils-2.22.52.0.1-reloc-on-by-default.patch.a��|mYNick Clifton <nickc@redhat.com> - 2.22.52.0.1-12O��@- Include demangle.h in the devel rpm.m��{mqNick Clifton <nickc@redhat.com> - 2.22.52.0.1-11Oz�@- Enable -zrelro by default for RHEL 7+. (#807831)l��zomJakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-10Oc+@- Fix up handling of hidden ifunc relocs on i?86_��y_cJeff Law <law@redhat.com> - 2.22.52.0.1-9O`�@- Fix c++filt docs (2nd instance) (#797752)���xm�!Jakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-8OWM�- Fix up handling of hidden ifunc relocs on x86_64 - Add Intel TSX supporth��wkiNick Clifton <nickc@redhat.com> - 2.22.52.0.1-7OU�@- Enable -zrelro by default. (#621983 #807831)P��v_EJeff Law <law@redhat.com> - 2.22.52.0.1-6OKp@- Fix c++filt docs (#797752)���ui� Mark Wielaard <mjw@redhat.com> - 2.22.52.0.1-5O;�@- Add upstream ld/13621 'dangling global hidden symbol in symtab' patch.Z��twAAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-4O2c�- Actually apply the patchn��swiAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-3O2c�- Add upstream weakdef.patch to fix RH #788107o��rkwNick Clifton <nickc@redhat.com> - 2.22.52.0.1-2O))A- Drat - forgot to upload the new tarball. Now done. z �.�^ � d � \ � m � � � `�s�j�Q��O��� z ���.s�AMark Salter <msalter@redhat.com> - 2.23.52.0.1-16.7S�9@- Backport support for full range of CRn in AArch64 system registers. Fix for bz#1109497� ��-q�Kyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.6Su��- AArch64: Backport two patches from upstream fixing GOT handling.V��,s=Brendan Conoboy <blc@redhat.com> - 2.23.52.0.1-16.5St�@- Rebuild for BZ#1098169�n��+q�mKyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.4Sl�@- AArch64: Backport two fixes from upstream and add a draft patch to set DF_STATIC_TLS when emitting IE relocs. Also increase ELF_COMMONPAGESIZE to 64K to match the kernel.a��*wORichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.3SNp�- Backport tls-relax-gdesc-ie fixS��)w3Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.2S!��- Fix for rh1075827P��(q3Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-16.1S��- Fix for rh1066712S��'k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-16R�U�- Mass rebuild 2014-01-24k��&ayJeff Law <law@redhat.com> - 2.23.52.0.1-15R��@- Set _performance_build to get -O3 builds (#1051060).�%��%a�kJeff Law <law@redhat.com> - 2.23.52.0.1-14Rʚ�- Fix two may-be-uninitialized issues exposed by changes in compiler flags used to build binutils (#1048848).S��$k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-13R�k�- Mass rebuild 2013-12-27�-��#o�mJakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12R 7�- Add Intel AVX3, MPX and SHA support. - Add support for x86-64 -mcmodel=large -fpic TLS transitions. (#994244)� ��"a�aJeff Law <law@redhat.com> - 2.23.52.0.1-11Qֵ@- Add support for TDB notes section (#805115) - Fix length operands for cdzt, cxzt czdt and czxt (#805115)�*��!a�uJeff Law <law@redhat.com> - 2.23.52.0.1-10Q�@- Add libstdc++-static as a build requirement when running the testsuite. - Add remaining power8 support (#731883)��� k�?Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-9Q��- Add support for the alternative debuging files generated by the DWZ program. (#965255)��� k�MNick Clifton <nickc@redhat.com> - 2.23.52.0.1-8Qn��- Import patch for FSF mainline PR 15371 to fix ifunc references in shared libraries. (#927818)��� k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-7Qd�- Fix library search paths for 64-bit aarch64 linux targets. (#950098)u�� k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-6Q@j@- Add explicit requirement of /usr/bin/pod2man. (#920545)� �� k�-Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-5Q9�- Reverts patch for PR15149 - prevents report weak DT_NEEDED symbols. (#918003)k��koNick Clifton <nickc@redhat.com> - 2.23.52.0.1-4Q7/�- Enable building of GOLD for the ARM. (#908966)j��kmNick Clifton <nickc@redhat.com> - 2.23.52.0.1-3Q4��- Fix errors reported by version 5.0 of texinfo.���k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-2Q0�@- Fix the creation of index tables in 64-bit thin archives. (#915411)e��kcNick Clifton <nickc@redhat.com> - 2.23.52.0.1-1Q/F�- Rebase on 2.23.51.0.1 release. (#916516)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.9-2Q�- Enable 64-bit BFD for aarch64. (#908904)���k�KNick Clifton <nickc@redhat.com> - 2.23.51.0.9-1Q��- Rebase on 2.23.51.0.9 release. (#907089) - Retire binutils-2.23.51.0.8-arm-whitespace.patch.q��k{Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-4P�-�- Allow more whitespace in ARM instructions. (#892261)� ��u� Patsy Franklin <pfrankli@redhat.com> - 2.23.51.0.8-3P�D�- Add bc to BuildRequires when running the testsuite. (#895321)c��k_Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-2P�!A- Add runtime link with libdl. (#889134)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.8-1P�!@- Rebase on 2.23.51.0.8 release. (#890382)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.7-1P�O@- Rebase on 2.23.51.0.7 release. (#889432)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.6-1P��@- Rebase on 2.23.51.0.6 release. (#880508) � �B�< � 1 � � >�6�B��j�#�Iq� � � u��Ha� Jeff Law <law@redhat.com> - 2.23.52.0.1-43Ug@- Do not discard stap probe note sections on aarch64 (#1225091)�:��Ga�Jeff Law <law@redhat.com> - 2.23.52.0.1-42Ud`@- Clamp maxpagesize at 1 (rather than 0) to avoid segfaults in the linker when passed a bogus max-page-size argument. (#1203449)�3��Fo�yMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-41U]�- Fixup bfd elf_link_add_object_symbols for ppc64 to prevent subsequent uninitialized accesses elsewhere. (#1172766)�S��Ea�GJeff Law <law@redhat.com> - 2.23.52.0.1-40UKS�- Minor testsuite adjustments for PPC changes in -38/-39. (#1183838) Fix md_assemble for PPC to handle arithmetic involving the TOC better. (#1183838)c��Do[Martin Sebor <msebor@redhat.com> - 2.23.52.0.1-39UJA- Fix ppc64: segv in libbfd (#1172766).o��CosMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-38UJ@- Unconditionally apply ppc64le patches (#1183838).�)��Ba�sJeff Law <law@redhat.com> - 2.23.52.0.1-37UG_@- Andreas's backport of z13 and dependent fixes for s390, including tesetcase fix from Apr 27, 2015.' (#1182153)���Aa�IJeff Law <law@redhat.com> - 2.23.52.0.1-35U#�- Fixup testsuite for AArch64 (#1182111) - Add support for @localentry for LE PPC64 (#1194164)b��@agJeff Law <law@redhat.com> - 2.23.52.0.1-34U�@- Do not install windmc(1) man page (#850832)� ��?a�3Jeff Law <law@redhat.com> - 2.23.52.0.1-33UF@- Do not replace R_390_TLS_LE{32,64} with R_390_TLS_TPOFF for PIE (#872148) - Enable relro by default for arm and aarch64 (#1203449) - Backport 3 RELRO improvements for ppc64/ppc64le from upstream (#1175624)`��>acJeff Law <law@redhat.com> - 2.23.52.0.1-31U .@- Backport upstream RELRO fixes. (#1200138)��=a� Jeff Law <law@redhat.com> - 2.23.52.0.1-30T���- Fix syntax for multiple --enable-targets configure option. (#1133147)m��<a}Jeff Law <law@redhat.com> - 2.23.52.0.1-29T�q@- Add support for crc instructions on aarch64 (#1179810)���;a�%Jeff Law <law@redhat.com> - 2.23.52.0.1-28T�|�- Bring back spu target for ppc64le which was accidentally lost (#1133147)}��:s� Richard Henderson <rth@redhat.com> - 2.23.52.0.1-27T� �- (Re-)Set ELF_COMMONPAGESIZE to 64k for ppc64le. (#1174826)� ��9w�%Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-26T��- Enable Intel AVX-512VL, AVX-512BW, AVX-512DQ and SGX support. (#1140375)�+��8e�sJeff Law <law@redhat.com> - 2.23.52.0.1-25.9S��@Revert this change (handled elsewhere): - Additional patch from Alan to fix problems with ld --defsym. (#1132732)���7e�-Jeff Law <law@redhat.com> - 2.23.52.0.1-23.9S�%@- Include powerpc-linux as a BFD target when building for ppc64le. (#1133147).�o��6{�ePatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-22.9S�0�- Reduce the size of aarch64 .debug_line; fix cfi encoding of fp registers; add register names to dumping of aarch64 cfi data. Patch provided by rth. Resolves: #1132641�+��5{�]Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-21.9S�0�- This fixes a problem seen on powerpc64le ELFv2 when creating a function symbol alias with ld --defsym. st_other needs to be copied from the source symbol to the alias in order to set up the local entry offset for the alias.� ��4{�APatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-20.9S��- Correct handling of strong followed by weak def merging of st_other Resolves: #1130479e��3eiJeff Law <law@redhat.com> - 2.23.52.0.1-19.9S�S@- Add missing PPC opcodes Resolves: #1090618� ��2e�3Jeff Law <law@redhat.com> - 2.23.52.0.1-18.9S�@- Do not overwrite valid SONAME with empty string. (#1128279) Resolves: #1128280r��1usAldy Hernandez <aldyh@redhat.com> - 2.23.52.0.1-17.9S�u�- Initial support for ppc64le. Fix for bz#1125478X��0w=Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.9S� @- Backport fix for movi.^��/wIRichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.8S�h@- Backport support for IFUNCs. v ` � = � Y � S � . ���_�� nT v �Y��\i�KNick Clifton <nickc@redhat.com> 2.25.1-14-baseWE��- Extend Release string to include ".base" thus ensuring that it will not collide with a DTS release which might otherwise have the same name. (#1337617)���[_�MNick Clifton <nickc@redhat.com> 2.25.1-13WB�- Add support for Zeppelin x86 extensions. - Add support for the AMD MWAITX extension. - Add support for the PowerPC Power9 architecture. - Remove spurious binutils document references. (#1335313) (#1335684) (#1333305)���Z_�SNick Clifton <nickc@redhat.com> 2.25.1-10W4�- Allow the BFD library to locate debug info files below the /usr/lib/debug directory. (#1311352)v��Y]�Nick Clifton <nickc@redhat.com> 2.25.1-9W ��- Housekeeping: Delete unused patches. Renumber existing patches.l��X]Nick Clifton <nickc@redhat.com> 2.25.1-8VՄ@- Fix PowerPC gas and ld testsuite failures. (#1312876)f��W]sNick Clifton <nickc@redhat.com> 2.25.1-7V�I�- Extend fix for AArch64 call veneers. (#1243559)|��V]� Nick Clifton <nickc@redhat.com> 2.25.1-6V�`�- Add support for Intel Memory Protection Key instructions. (#1304451)�v��U]�Nick Clifton <nickc@redhat.com> 2.25.1-4V��@- Improve warning message for overflowing AArch64 relocs. - Import patch to fix PR18668. - Ignore warning messages about duplicate FDE entries (#1300543) (#1300603) (#1285614) (#1243559)�\��T]�]Nick Clifton <nickc@redhat.com> 2.25.1-3V�T@- Experimental rebase on FSF 2.25.1 sources. (#1341730) - Retire: patch11, patch12, patch13, patch14, patch15, patch16, patch17, patch18, patch19, patch20, patch21, patch22, patch23, patch24, patch25, patch26, patch27, patch28, patch29, patch30, patch32, patch100, patch101, patch102, patch110, patch111, patch112, patch113, patch114, patch115, patch116, patch117, patch118, patch119, patch120, patch121, patch201, patch202, patch203, patch204, patch205, patch206, patch207, patch208, patch209, patch210, patch211, patch212, patch300, patch301, patch302, patch303, patch304, patch305, patch306, patch307, patch308, patch309, patch400, patch401, patch402, patch403, patch404, patch405, patch406, patch407, patch501 - Add patch to suppress checking of PPC64 TLBIE instruction. [TEMPORARY] - Add fix for FSF PR 18879 - Add fix for s390x linker testsuite failure. (#1276755) (#1260158) (#1300734) (#1288068)o��SiyNick Clifton <nickc@redhat.com> 2.23.52.0.1-56V���- Remove __PPC__ checks from BFD library. (#1261016)� ��Ri�-Nick Clifton <nickc@redhat.com> 2.23.52.0.1-55V �@- Add missing delta to patch that fixes parsing corrupted archives. (#1162666)���Qi�;Nick Clifton <nickc@redhat.com> 2.23.52.0.1-54U��@- Import patch for PR 18270: Create AArch64 GOT entries for local symbols. (#1238783)���Pc�%Jeff Law <law@redhat.com> - 2.23.52.0.1-51U�n�- Fix incorrectly generated binaries and DSOs on PPC platforms. (#1247126)z��Om� Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-50U�3E- Fix memory corruption parsing corrupt archives. (#1162666)p��NmwNick Clifton <nickc@redhat.com> - 2.23.52.0.1-49U�3D- Fix directory traversal vulnerability. (#1162655)l��MmoNick Clifton <nickc@redhat.com> - 2.23.52.0.1-48U�3C- Fix stack overflow in SREC parser. (#1162621)���Lm�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-47U�3B- Fix stack overflow whilst parsing a corrupt iHex file. (#1162607)���Km�ENick Clifton <nickc@redhat.com> - 2.23.52.0.1-46U�3A- Fix out of bounds memory accesses when parsing corrupt PE binaries. (#1162594, #1162570)�5��Jm�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45U�3@- Change strings program to default to -a. Fix problems parsing files containg corrupt ELF group sections. (#1157276)�a��Ia�cJeff Law <law@redhat.com> - 2.23.52.0.1-44U�J@- Avoid reading beyond function boundary when disassembling. (#1060282) - For binary ouput, we don't have an ELF bfd output so can't access elf_elfheader. (#1226864) H �Y � I � F � 1 � # � v�x���N � H t��se�Nick Clifton <nickc@redhat.com> 2.27-16.baseY��@- Fix seg-fault when stripping s390x binaries. (#14888890)� ��re�/Nick Clifton <nickc@redhat.com> 2.27-15.baseY���- Add support for creating a PT_S390_PGSTE segment in s390 binaries. (#1485398)���qe�INick Clifton <nickc@redhat.com> 2.27-14.baseY���- Add standards.info file to documentation distributed with the binutils package. (#1467390)���pe�ANick Clifton <nickc@redhat.com> 2.27-12.baseY��A- Generate an error when attempting to link non-PIC s390 objects in PIE mode. (#1406430)}��oe�Nick Clifton <nickc@redhat.com> 2.27-11.baseY��@- Fix generation of dynamic COPY relocs for the AArch64. (#1452170)�`��ne�]Nick Clifton <nickc@redhat.com> 2.27-10.baseY��@- Rebase to binutils 2.27 + Retire: binutils-2.20.51.0.2-ia64-lib64.patch + Retire: binutils-2.20.51.0.10-copy-osabi.patch + Retire: binutils-rh1260158.patch + Retire: binutils-rh1300734.patch + Retire: binutils-2.25.1-aarch64-overflow-warnings.patch + Retire: binutils-2.25-aarch64-pr18668.patch + Retire: binutils-2.25.1-aarch64-pagesize.patch + Retire: binutils-rh1304451.patch + Retire: binutils-2.25.1-x86-Zepplin.patch + Retire: binutils-2.25.1-power9.patch + Retire: binutils-2.25.1-x86-mwaitx.patch + Retire: binutils-rh1162655.patch + Retire: binutils-2.25.1-aarch64-arch-extension.patch + Retire: binutils-2.25.1-s390-z13.patch + Retire: binutils-2.25.1-gold-resolving-to-hidden-symbols.patch - Sync with Pegas 1.1 binutils. - Import patch to add support for DWARF5 tags. (#1472955) - Import patch to fix converting addresses into function names. (#1465318)(#1452170) - Add support for ARMv8.2 ISA extensions. (#1385959)� ��mi�3Nick Clifton <nickc@redhat.com> 2.25.1-33.baseYw2�- Add support for new tags defined by version 5 of the DWARF standard. (#1472955)}��li�Nick Clifton <nickc@redhat.com> 2.25.1-32.baseYw2�- Remove the minmax part of the objdump speedup patch. (#1465318)y��ki� Nick Clifton <nickc@redhat.com> 2.25.1-31.baseY�@- Fix generation of PLT entries for s390 binaries. (#1440168)���ji�KNick Clifton <nickc@redhat.com> 2.25.1-28-baseY �- Disable fix for 1406430. It breaks building real s390 executables. (#1447209) (#1406430)� ��ii�Nick Clifton <nickc@redhat.com> 2.25.1-27-baseY�@- Fix infnite loop in linker when counting PowerPC stubs. (#1406498)���hi�#Nick Clifton <nickc@redhat.com> 2.25.1-26-baseX|��- Speed up displaying disassembly when mixed with source code. (#1311352)� ��gi�YNick Clifton <nickc@redhat.com> 2.25.1-25-baseX|��- Fix GOLD so that it will not warn about references to hidden symbols in shared objects. (#1326710)e��fieNick Clifton <nickc@redhat.com> 2.25.1-24-baseXo��- Fix thinko in previous patch. (#1406430)� ��ei�/Nick Clifton <nickc@redhat.com> 2.25.1-23-baseXo��- Add code to detect attempts to link PIE and non-PIE S390 binaries. (#1406430)� ��di�Nick Clifton <nickc@redhat.com> 2.25.1-22-baseW�tA- Fix date format bug in changelog which was preventing package build.���ci� Nick Clifton <nickc@redhat.com> 2.25.1-21-baseW�t@- Add support for Z13 extensions to IBMs s390 architecture. (#1364516)x��bi� Nick Clifton <nickc@redhat.com> 2.25.1-20-baseWm �- Import new PPC ISA 3.0 patch from FSF binutils. (#1341730)���ai�=Nick Clifton <nickc@redhat.com> 2.25.1-19-baseW^�A- Add support for the .arch_extension pseudo-op to the AArch64 port of GAS. (#1276755)u��`i�Nick Clifton <nickc@redhat.com> 2.25.1-18-baseW^�@- Update patch to fix AArch64 stub generation. (#1243559)� ��_i�YNick Clifton <nickc@redhat.com> 2.25.1-17-baseWP �- Close memory leak in "ar" archiver program. (#1162655) - Retire the copy-osabi patch. (#1252066)}��^i�Nick Clifton <nickc@redhat.com> 2.25.1-16-baseWP �- Version bump to allow adding 1300543 to the errata. (#1300543)}��]i�Nick Clifton <nickc@redhat.com> 2.25.1-15-baseWN�@- Extend Power9 patch to add new ISA 3.0 instructions. (#1341730) � �k � } � E � ? ��G�<((�� � � ��� g�?Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�� gmNick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��� g�7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�� g�Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){��g�Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)���g�9Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){��g�Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)�{��g�Nick Clifton <nickc@redhat.com> 2.27-34.base[�@- Fix seg-fault parsing corrupt AOUT format files. (#1579799) - Fix seg-fault parsing corrupt DWARF2 debug information. (#1579802) - Fix seg-fault parsing corrupt ELF format files. (#1579801)���g�9Nick Clifton <nickc@redhat.com> 2.27-33.baseZ�n�- Fix seg-fault parsing ELF files. (#1578979) - Fix seg-fault parsing DWARF-2 information. (#1579065) - Fix seg-fault parsing DWARF-2 information. (#1579051) - Fix seg-fault parsing a PE format file. (#1579019)�Z��g�ONick Clifton <nickc@redhat.com> 2.27-32.baseZ� @- Fix seg-fault parsing DWARF-1 information. (#1569580) - Fix seg-fault parsing DWARF-2 information. (#1569891) - Fix seg-fault parsing COFF files. (#1571917)x��g� Nick Clifton <nickc@redhat.com> 2.27-31.baseZ�@- Allow "lea foo@GOT, %reg" in PIC mode on the x86. (#1573872)�+��g�qNick Clifton <nickc@redhat.com> 2.27-30.baseZ��@- Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.{�� g�Nick Clifton <nickc@redhat.com> 2.27-29.baseZ��- Add support for the GLOBALAUDIT dynamic linker tag. (#1439351)�m��g�uNick Clifton <nickc@redhat.com> 2.27-28.baseZ��- Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section. (#1557346) - Stop strip from replacing unknown relocs with null relocs. (#1545386)���~g� Nick Clifton <nickc@redhat.com> 2.27-27.baseZWQ�- Do enable relro by default for the PowerPC64 architecture. (#1523946)l��}guNick Clifton <nickc@redhat.com> 2.27-26.baseZN@- Fix thinko in post-uninstall section. (#1520899)���|g�=Nick Clifton <nickc@redhat.com> 2.27-25.baseZKtA- Remove man and info files not needed when building without documentation. (#1530339)���{g�INick Clifton <nickc@redhat.com> 2.27-24.baseZKt@- Check for the existance of standards.info.gz before attempting to uninstall it. (#1520899)���zg�INick Clifton <nickc@redhat.com> 2.27-23.baseZ8�@- Do not complain if the standards.info.gz file does not exist when uninstalling. (#1520899)���yg�'Nick Clifton <nickc@redhat.com> 2.27-22.baseZ.s@- Do not enable relro by default for the PowerPC64 architecture. (#1523946)�!��xe�_Nick Clifton <nickc@redhat.com> 2.27-21.baseZ }�- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections. (#1513014)�8��we� Nick Clifton <nickc@redhat.com> 2.27-20.baseY��- Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs. (#1508954)�*��ve�qNick Clifton <nickc@redhat.com> 2.27-19.baseY�|�- Suppress the generation of R_X86_64_GOTPCRELX, R_X86_64_REX_GETPCRELX and R_386_GOT32X relocations. (#1506004)f��uekNick Clifton <nickc@redhat.com> 2.27-18.baseYܶ@- Update AArch64 copy reloc patch. (#1430743)x��te� Nick Clifton <nickc@redhat.com> 2.27-17.baseY��@- Add LNIA, SCV and RFSCV instructions from Power9. (#1356856) 1 ]k � | � i�_�\��>�5 � 1 � �� S�GCristian Gafton <gafton@redhat.com>4��@- updated to 2.8.1.0.15 (required to compile the newer glibc) - all patches are obsoleted nowo�� C� Erik Troan <ewt@redhat.com>4M�- added 2.8.1.0.1 patch from hj - added patch for alpha palcode form rth� ���!�Koba Karaputadze <kkaraputadze@cloudlinux.com> 2.27-44.base.1.tuxcare.els2g��- CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes�a����'Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c���o�Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��g�uNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� ��g�WNick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)���g�?Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h��gmNick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)���g�7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s��g�Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){��g�Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)���g�9Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561)�a����'Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c���o�Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��g�uNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� �� g�WNick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085) * � �N � ~ � 6 � � g # � 5 � "h�r/��-�Z��d!��W ��X��g � ���GM�QJakub Jelinek <jakub@redhat.com>:��- 2.10.1.0.7 - remove ExcludeArch ia64 - back out the -oformat, -omagic and -output change for nowF��FMCJakub Jelinek <jakub@redhat.com>::�- Prereq /sbin/install-info7��EM%Jakub Jelinek <jakub@redhat.com>:c�- 2.10.1.0.2E��DMAJakub Jelinek <jakub@redhat.com>:c�- add one more alpha patchi��CM�Jakub Jelinek <jakub@redhat.com>:z�- fix alpha visibility as problem - add support for Ultra-IIIE��BMAJakub Jelinek <jakub@redhat.com>9�A- and one more alpha patch>��AM3Jakub Jelinek <jakub@redhat.com>9�@- two sparc patches6��@M#Jakub Jelinek <jakub@redhat.com>9|/�- 2.10.0.186��?M#Jakub Jelinek <jakub@redhat.com>9i��- 2.10.0.125��>M!Jakub Jelinek <jakub@redhat.com>9WE�- 2.10.0.96��=M#Jakub Jelinek <jakub@redhat.com>9H�@- fix ld -rS��<M]Jakub Jelinek <jakub@redhat.com>9;�@- 2.9.5.0.46 - use _mandir/_infodir/_lib?��;]%Bernhard Rosenkraenzer <bero@redhat.com>9�@- 2.9.5.0.41?��:]%Bernhard Rosenkraenzer <bero@redhat.com>8�e@- 2.9.5.0.34?��9]%Bernhard Rosenkraenzer <bero@redhat.com>8ص�- 2.9.5.0.31l��8S�Cristian Gafton <gafton@redhat.com>8��@- man pages are compressed - apply kingdon's patch from #5031d��7G�Jeff Johnson <jbj@redhat.com>8��@- Permit package to be built with a prefix other than /usr.g��6SCristian Gafton <gafton@redhat.com>8}�@- add pacth from hjl to fix the versioning problems in ldx��5]�Bernhard Rosenkraenzer <bero@redhat.com>8{@- Add sparc patches from Jakub Jelinek <jakub@redhat.com> - Add URL:?��4]%Bernhard Rosenkraenzer <bero@redhat.com>8V1@- 2.9.5.0.22?��3]%Bernhard Rosenkraenzer <bero@redhat.com>8;�@- 2.9.5.0.19?��2]%Bernhard Rosenkraenzer <bero@redhat.com>8�- 2.9.5.0.16j��1O�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- make shared non-pic libraries work on sparc with glibc 2.1.���0#�eJim Kingdon7�}�- No source/spec changes, just rebuilding with egcs-1.1.2-18 because the older egcs was miscompling gprof.�5��/S�Cristian Gafton <gafton@redhat.com>7$U@- back out very *stupid* sparc patch done by HJLu. People, keep out of things you don't understand. - add alpha relax patch from rth�*��.S�Cristian Gafton <gafton@redhat.com>7��- version 2.9.1.0.23 - patch to make texinfo documentation compile - auto rebuild in the new build environment (release 2)`��-SqCristian Gafton <gafton@redhat.com>6Ҙ@- updated to 2.9.1.0.21 - merged with UltraPenguin� ��,S�mCristian Gafton <gafton@redhat.com>6��@- added ARM patch from philb - version 2.9.1.0.19a - added a patch to allow arm* arch to be identified as an ARMF��+S=Cristian Gafton <gafton@redhat.com>6n�- updated to 2.9.1.0.14.@��*G=Jeff Johnson <jbj@redhat.com>6��- updated to 2.9.1.0.13.E��)S;Cristian Gafton <gafton@redhat.com>5�m�- updated to 2.9.1.0.12?��(G;Jeff Johnson <jbj@redhat.com>5�v@- updated to 2.9.1.0.7.?��'G;Jeff Johnson <jbj@redhat.com>5u:�- updated to 2.9.1.0.6.���&C�GErik Troan <ewt@redhat.com>5s�@- added patch from rth to get right offsets for sections in relocateable objects on sparc32T��%SYProspector System <bugs@redhat.com>5Q�@- translations modified for de, fr, trc��$SwCristian Gafton <gafton@redhat.com>5N�A- version 2.9.1.0.4 is out; even more, it is public !?��#G;Jeff Johnson <jbj@redhat.com>5N�@- updated to 2.9.1.0.3.B��"S5Cristian Gafton <gafton@redhat.com>5;8�- updated to 2.9.0.3C��!S7Cristian Gafton <gafton@redhat.com>53O�- upgraded to 2.9.0.2�H�� S�?Cristian Gafton <gafton@redhat.com>5'r@- updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target... :-) - "fixed" the damn make install command so that all tools get installed��� S�[Cristian Gafton <gafton@redhat.com>5#}�- upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile) - added info packages handlingF�� S=Cristian Gafton <gafton@redhat.com>5+@- upgraded to 2.8.1.0.23 � �n�> v ' � t � � B � v}��$�X�� � ���ak�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-6< �@- one more .eh_frame patch fix - fix alpha .eh_frame handling - optimize elf-strtab finalizec��`k_Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-5<;@- yet another fix for the .eh_frame patchs��_kJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-4<�- Alan Modra's patch to avoid crash if there is no dynobj�W��^k�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3<�@- H.J.'s patch to avoid crash if input files are not ELF - don't crash if a SHF_MERGE for some reason could not be merged - fix objcopy/strip to preserve SHF_MERGE sh_entsize - optimize .eh_frame sections, add PT_GNU_EH_FRAME support - support anonymous version tags in version scriptX��]kIJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-2<�A- fix IA-64 SHF_MERGE handling�k��\k�mJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1<�@- update to 2.11.92.0.12 - optimize .dynstr and .shstrtab sections (#55524) - fix ld.1 glitch (#55459) - turn relocs against SHF_MERGE local symbols with zero addend into STT_SECTION + addend - remove man pages for programs not included (nlmconv, windres, dlltool; - add BuildRequires for texinfoc��[iaJakub Jelinek <jakub@redhat.com> 2.11.92.0.7-2;��- duh, fix strings on bfd objects (#55084)���Zi� Jakub Jelinek <jakub@redhat.com> 2.11.92.0.7-1;�g@- update to 2.11.92.0.7 - remove .rel{,a}.dyn from output if it is empty���Yi�;Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-2;ʼn�- fix strings patch - use getc_unlocked in strings to speed it up by 50% on large files�P��Xi�9Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1;�8@- update to 2.11.92.0.5 - binutils localization (#45148) - fix typo in REPORT_BUGS_TO (#54325) - support files bigger than 2GB in strings (#54406)���Wk�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-12;��@- on IA-64, don't mix R_IA64_IPLTLSB relocs with non-PLT relocs in .rela.dyn section.�]��Vk�QJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11;�q�- add iplt support for IA-64 (Richard Henderson) - switch to new section flags for SHF_MERGE and SHF_STRINGS, put in compatibility code - "s" section flag for small data sections on IA-64 and Alpha (Richard Henderson) - fix sparc64 .plt[32768+] handling - don't emit .rela.stab on sparcR��Uk=Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-10;��@- fix SHF_MERGE on Sparcr��TiJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-9;�|@- on Alpha, copy *r_offset to R_ALPHA_RELATIVE's r_addend�5��Si�Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8;�*�- on IA-64, put crtend{,S}.o's .IA_64.unwind section last in .IA_64.unwind output section (for compatibility with 7.1 eh)� ��Ri�SJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-7;�A�- put RELATIVE relocs first, not last - enable -z combreloc by default on IA-{32,64}, Alpha, Sparc*�Q��Qi�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6;��@- support for -z combreloc - remove .dynamic patch, -z combreloc patch does this better - set STT_FUNC default symbol sizes in .endp directive on IA-64R��Pi?Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-5;R�@- fix last patch (H.J.Lu)Y��OiMJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-4;N�- fix placing of orphan sectionsK��NMMJakub Jelinek <jakub@redhat.com>;4��- fix SHF_MERGE support on Alpha�C��MM�;Jakub Jelinek <jakub@redhat.com>; �@- 2.11.90.0.8 - some SHF_MERGE suport fixes - don't build with tooldir /usrusr instead of /usr (#40937) - reserve few .dynamic entries for prelinkingN��LMSJakub Jelinek <jakub@redhat.com>:��- 2.11.90.0.5 - SHF_MERGE support���KM�7Jakub Jelinek <jakub@redhat.com>:ɻ@- 2.11.90.0.4 - fix uleb128 support, so that CVS gcc bootstraps - some ia64 fixesT��JM_Jakub Jelinek <jakub@redhat.com>:��- add -Bgroup support from Ulrich DrepperR��IM[Jakub Jelinek <jakub@redhat.com>:��- hack - add elf_i386_glibc21 emulation8��HM'Jakub Jelinek <jakub@redhat.com>:�@- 2.10.91.0.2 � �r q � � � P � N�g�N3�:��-Y � �N��yi�5Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1=��@- update to 2.13.90.0.4 - x86-64 TLS support - some IA-32 TLS fixes - some backported patches from trunk - include opcodes, ld, gas and bfd l10n too�O��xi�7Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3=��@- allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff - clear memory at *r_offset of dynamic relocs on PPC - avoid ld crash if accessing non-local symbols through LE relocs - new IA-32 TLS relocs, bugfixes and testcases - use brl insn on IA-64 (Richard Henderson) - fix R_IA64_PCREL21{M,F} handling (Richard Henderson) - build in separate builddir, so that gasp tests don't fail - include localization]��wiUJakub Jelinek <jakub@redhat.com> 2.13.90.0.2-2=R]@- fix R_386_TPOFF32 addends (#70824)�}��vi�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1=K�- update to 2.13.90.0.2 - fix ld TLS assertion failure (#70084) - fix readelf --debug-dump= handling to match man page and --help (#68997) - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)�%��uk�aJakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1=>��- update to 2.12.90.0.15 - TLS .tbss fix - don't use rpm %configure macro, it is broken too often (#69366)���ti�7Jakub Jelinek <jakub@redhat.com> 2.12.90.0.9-1<�@- update to 2.12.90.0.9 - TLS support - remove gasp.info from %post/%preun (#65400)a��si]Jakub Jelinek <jakub@redhat.com> 2.12.90.0.7-1<�5�- update to 2.12.90.0.7 - run make check���rk�CJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12<�5�- fix .hidden handling on SPARC (Richard Henderson) - don't crash when linking -shared non-pic code with SHF_MERGE - fix .eh_frame_hdr for DW_EH_PE_aligned - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs���qk�EJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-11<���- don't emit dynamic R_SPARC_DISP* relocs against STV_HIDDEN symbols into shared librariesy��pk� Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-10<��@- don't merge IA-64 unwind info sections together during ld -rm��oiuJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-9<��@- fix DATA_SEGMENT_ALIGN on ia64/alpha/sparc/sparc64r��niJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-8<���- don't crash on SHN_UNDEF local dynsyms (Andrew MacLeod)]��miUJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-7<�V@- fix bfd configury bug (Alan Modra)� ��li�QJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-6<��A- don't copy visibility when equating symbols - fix alpha .text/.data with .previous directive bug� ��ki�+Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-5<��@- fix SHF_MERGE crash with --gc-sections (#60369) - C++ symbol versioning patch�_��ji�WJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4<v2�- add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs, if DW_EH_PE_absptr cannot be converted that way, don't build the .eh_frame_hdr search tableY��iiMJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-3<l�@- fix ld -N broken by last patch�7��hi�Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2<i�- trade one saved runtime page for data segment (=almost always not shared) for up to one page of disk space where possible���gi�;Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-1<c��- update to 2.11.93.0.2 - use %{ix86} instead of i386 for -z combreloc default (#59086)���fm�?Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-10<Y1�- don't create SHN_UNDEF STB_WEAK symbols unless there are any relocations against themc��ewSBill Nottingham <notting@redhat.com> 2.11.92.0.12-9.1<W�@- rebuild (fix ia64 miscompilation):��dE3Tim Powers <timp@redhat.com><<0�- automated rebuild]��ckSJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-8<,^�- two further .eh_frame patch fixes�j��bk�kJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7< �@- as ld is currently not able to shrink input sections to zero size during discard_info, build a fake minimal CIE in that case - update elf-strtab patch to what was commited � 5�+ � � Q � � k����o�<�M�M � � ��k�-Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-3>�-�- make elf64ppc target native extra on ppc and elf32ppc native extra on ppc64._��kWJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-2>�9@- fix TLS on IA-64 with ld relaxationR��k=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-1>|P@- update to 2.13.90.0.20C��k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-9>Z B- rebuilt���k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-8>Z A- don't strip binaries in %install, so that there is non-empty debuginfoa��k[Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-7>Z @- don't optimize .eh_frame during ld -r�F�� k�#Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6>K��- don't clear elf_link_hash_flags in the .symver patch - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME (Alan Modra)��� k�'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5>G�B- fix the previous .symver change - remove libbfd.so and libopcodes.so symlinks, so that other packages link statically, not dynamically against libbfd and libopcodes whose ABI is everything but stable��� k� Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-4>G�A- do .symver x, x@FOO handling earlier - support .file and .loc on s390*�N�� k�3Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3>G�@- handle .symver x, x@FOO in ld such that relocs against x become dynamic relocations against x@FOO (#83325) - two PPC64 TLS patches (Alan Modra)��� k�=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2>FB�- fix SEARCH_DIR on x86_64/s390x - fix Alpha --relax - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt and no .rela.dyn section - support IA-32 on IA-64 (#83752) - .eh_frame_hdr fix (Andreas Schwab)p��kyJakub Jelinek <jakub@redhat.com> 2.13.90.0.18-1>BN@- update to 2.13.90.0.18 + 20030121->20030206 CVS diff�4��k�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8>?�@- alpha TLS fixes - use .debug_line directory table to make the section tiny bit smaller - libtool fix from Jens PetersenG��k'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-7>=@- sparc32 TLSh��kiJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-6>1*�- s390{,x} TLS and two other mainframe patches���k�KJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-5>'�@- fix IA-64 TLS IE in shared libs - .{preinit,init,fini}_array compat hack from Alexandre Oliva���k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-4>&��- IA-64 TLS fixes - fix .plt sh_entsize on Alpha - build with %_smp_mflagsc��k_Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-3=�@- fix strip on TLS binaries and librariesR��k=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-2=�V�- fix IA-64 ld bootstrapj�� kmJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-1=�@- update to 2.13.90.0.16 - STT_TLS SHN_UNDEF fix�E��k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4=�- pad .rodata.cstNN sections at the end if they aren't sized to multiple of sh_entsize - temporary patch to make .eh_frame and .gcc_except_table sections readonly if possible (should be removed when AUTO_PLACE is implemented) - fix .PPC.EMB.apuinfo section flags�.��~k�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3=��@- fix names and content of alpha non-alloced .rela.* sections (#76583) - delete unpackaged files from the buildrootk��}koJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-2=�@- enable s390x resp. s390 emulation in linker too�0��|k�wJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1=���- update to 2.13.90.0.10 - add a bi-arch patch for sparc/s390/x86_64 - add --enable-64-bit-bfd on sparc, s390 and ppcQ��{i=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-3=�k�- fix combreloc testcase�F��zi�%Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2=�k�- fix orphan .rel and .rela section placement with -z combreloc (Alan Modra) - skip incompatible linker scripts when searching for libraries � M�b � U � ) d � N � -v�} � Vf�t�%� � � C��1k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-23?�@- rebuilt�I��0k�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22?��- fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661) - don't access memory beyond what was allocated in readelf (Richard Henderson)g��/kgJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-21? U@- add .cfi_* support on ppc{,64} and s390{,x}_��.kWJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-20? �@- remove lib{bfd,opcodes}.la (#98190)�g��-k�eJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19? `�- fix -pie support on amd64, s390, s390x and ppc64 - issue relocation overflow errors for s390/s390x -fpic code when accessing .got slots above 4096 bytes from .got startC��,k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-18?�- rebuilt�&��+k�cJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17?�- fix ia64 -pie support - require no undefined non-weak symbols in PIEs like required for normal binaries�$��*k�_Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16?�@- fix readelf -d on IA-64 - build libiberty.a with -fPIC, so that it can be lined into shared librariesC��)k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-15>���- rebuilt�0��(k�wJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14>���- added support for Intel Prescott instructions - fix hint@pause for ia64 - add workaround for LTP sillyness (#97934)�G��'k�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13>�T@- update CFI stuff to 2003-06-18 - make sure .eh_frame is aligned to 8 bytes on 64-bit arches, remove padding within one .eh_frame sectionC��&k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-12>��- rebuilt[��%kOJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-11>��- one more fix for the same patchN��$k5Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-10>��- fix previous patch�"��#i�]Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9>�@- ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend and the other relocs have *r_offset == 0�2��"i�}Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8>��@- remove some unnecessary provides in ppc64 linker script which were causing e.g. empty .ctors/.dtors section creation�0��!i�yJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7>�@- some CFI updates/fixes - don't create dynamic relocations against symbols defined in PIE exported from its .dynsymh�� ikJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-6>��@- update gas to 20030604 - PT_GNU_STACK supportX�� iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-5>�<@- buildrequire gettext (#91838)p�� i{Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-4>ؙ@- fix shared libraries with >= 8192 .plt slots on ppc32B�� i Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-3>�A- rebuilt�@�� i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2>�@- rename ld --dynamic option to --pic-executable or --pie - fix ld --help output - document --pie/--pic-executable in ld.info and ld.1� ��i�YJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1>Ԥ�- update to 2.14.90.0.4-1 - gas CFI updates (Richard Henderson) - dynamic executables (Ulrich Drepper)���i� Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-2>��- fix ELF visibility handling - tidy plt entries on IA-32, ppc and ppc64R��i?Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-1>��@- update to 2.14.90.0.2-1l��kqJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-8>��@- fix bfd_elf_hash on 64-bit arches (Andrew Haley)C��k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-7>���- rebuilt���k�EJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-6>���- optimize DW_CFA_advance_loc4 in gas even if there is 'z' augmentation with size 0 in FDEK��k/Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-5>��@- fix SPARC build�.��k�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4>�"@- fix ppc32 plt reference counting - don't include %{_prefix}/%{_lib}/debug in the non-debuginfo package (#87729) ! U �(� � + � � k � U � 7���^�A�7�$�o g�X � U n��RiwJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-1A 8@- update to 2.15.91.0.2 - BuildRequire flex (#117763)� ��Qi�1Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-7@�L@- use lib64 instead of lib directories on ia64 if %{_lib} is set to lib64 by rpm� ��Pi�3Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-6@�@- fix a bug introduced in the ++/-- rejection patch from 2.15.90.0.3 (Alan Modra)y��Oi� Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-5@���- fix s390{,x} .{,b,p2}align handling - ppc/ppc64 testsuite fix�1��Ni�{Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4@�4@- -z relro ppc/ppc64/ia64 fixes - change x86-64 .plt symbol st_size handling to match ia32 - prettify objdump -d outputN��Mi7Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-3@��- several SPARC fixes]��LiUJakub Jelinek <jakub@redhat.com> 2.15.90.0.3-2@�m�- yet another fix for .tbss handlingP��Ki;Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-1@�- update to 2.15.90.0.3�6��Jm�Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2@dA- update to 20040326 CVS - fix ppc64 weak .opd symbol handling (Alan Modra, #119086) - fix .tbss handling bug introducedT��Im?Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-1@d@- update to 2.15.90.0.1.1�5��Hi�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8@7H@- with -z now without --enable-new-dtags create DT_BIND_NOW dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit setL��Gi3Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-7@5��- fix -pie on ppc32���Fi�=Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-6@5��- clear .plt sh_entsize on sparc32 - put whole .got into relro area with -z now -z relro3��EK Elliot Lee <sopwith@redhat.com>@,�@- rebuiltK��Di1Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-4@�@- fix -pie on IA64Z��CiOJakub Jelinek <jakub@redhat.com> 2.14.90.0.8-3@ �- fix testcases on s390 and s390x�F��Bi�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2@�A- fix testcases on AMD64 - fix .got's sh_entsize on IA32/AMD64 - set COMMONPAGESIZE on s390/s390x - set COMMONPAGESIZE on ppc32 (Alan Modra)P��Ai;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-1@�@- update to 2.14.90.0.8X��@iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-4@�- fix -z relro on 64-bit arches\��?iSJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-3@�@- fix some bugs in -z relro supportf��>igJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-2?���- -z relro support, reordering of RW sectionsP��=i;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.7-1?���- update to 2.14.90.0.7� ��<i�WJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4?��- fix assembly parsing of foo=(.-bar)/4 (Alan Modra) - fix IA-64 assembly parsing of (p7) hint @pausen��;iwJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-3?yp@- don't abort on some linker warnings/errors on IA-64l��:isJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-2?lAA- fix up merge2.s to use .p2align instead of .align�H��9i�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1?lA@- update to 2.14.90.0.6 - speed up string merging (Lars Knoll, Michael Matz, Alan Modra) - speed up IA-64 local symbol handling during linking��8i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-7?Xz�- avoid ld -s segfaults introduced in 2.14.90.0.5-5 (Dmitry V. Levin,� ��7i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-6?O@@- build old demangler into libiberty.a (#102268) - SPARC .cfi* supportW��6iIJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-5?/�@- fix orphan section placement�5��5i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4?&a�- fix ppc64 elfvsb linker tests - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols type and size (Alan Modra)_��4iYJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-3?&a�- fix 64-bit unclean code in ppc-opc.c^��3iWJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-2?%A- fix 64-bit unclean code in tc-ppc.cr��2iJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-1?%@- update to 2.14.90.0.5 - fix ld -r on ppc64 (Alan Modra) V � X I � % i n �� �Z�� g�� V �:��ii� Jakub Jelinek <jakub@redhat.com> 2.16.90.0.3-1B�@- update to 2.16.90.0.3 - update to 20050615 CVS - ppc32 secure PLT support (Alan Modra) - further bfd/readelf robustificationq��hmyJakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-4B��@- further bfd robustification (CAN-2005-1704, #158680)���gm�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-3B���- further objdump and readelf robustification (CAN-2005-1704, #158680)v��fm�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-2B�h�- bfd and readelf robustification (CAN-2005-1704, #158680)���em�!Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-1BIC@- update to 2.15.94.0.2.2 - speed up walk_wild_section (Robert O'Callahan)M��di5Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-4B,B@- rebuilt with GCC 4�3��ci�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-3B#�- fix buffer overflows in readelf (#149506) - move c++filt to binutils from gcc-c++, conflict with gcc-c++ < 4.0 (#86333)�\��bi�QJakub Jelinek <jakub@redhat.com> 2.15.94.0.2-1B L�- update to 2.15.94.0.2 - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296) - fix stripping of binaries/libraries that have empty sections right before .dynamic section (with the same starting address; #144038) - handle AS_NEEDED (...) in linker script INPUT/GROUP[��akOJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-11A��- fix a longstanding -z relro bug�v��`k�Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-10A��@- avoid unnecessary gap with -z relro showing on i686 libc.so - ppc64 --emit-relocs fix (Alan Modra) - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS, as created by nasm; #142181) - don't try to make absptr LSDAs relative if they don't have relocations against them (Alan Modra, #141162)R��_q7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5.EL4A��- fix ar xo (#104344)l��^isJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5AvS@- fix --just-symbols on ppc64 (Alan Modra, #135498)���]i�AJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-4Ao��- fix code detecting matching linkonce and single member comdat group sections (#133078)� ��\i�QJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3Aju�- revert Sep 09 change to make ppc L second argument e.g. for tlbie non-optional - fix stripping of prelinked binaries and libraries (#133734) - allow strings(1) on 32-bit arches to be used again with > 2GB files (#133555)���[i�7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-2Aa;@- update to 2.15.92.0.2 - change ld's ld.so.conf parser to match ldconfig's (#129340)�v��Zi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9AN�@- avoid almost 1MB (sparse) gaps in the middle of -z relro libraries on x86-64 (Andreas Schwab) - fix -z relro to make sure end of PT_GNU_RELRO segment is always COMMONPAGESIZE aligned�7��Yi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8A#D�- fix linker segfaults on input objects with SHF_LINK_ORDER with incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)�=��Xi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7A#D�- resolve all undefined ppc64 .* syms to the function bodies through .opd, not just those used in brach instructions (Alan Modra)^��WiWJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-6A!�A- fix ppc64 ld --dotsyms (Alan Modra)� ��Vi�-Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5A!�@- various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra) - fix --gc-sections - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for .gnu.linkonce.t.* function doesn't need unwind info�A��Ui�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4A ��- kill ppc64 dot symbols (Alan Modra) - objdump -d support for objects without dot symbols - support for overlapping ppc64 .opd entriesh��TikJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-3Ag@- fix a newly introduced linker crash on x86-64r��S]� Alan Cox <alan@redhat.com> 2.15.91.0.2-2A�- BuildRequire bison and macroise buildroot - from Steve Grubb � �ER � T � / � c � G v�����p�B��_�H � � ��i�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-4D�f�- link libopcodes*.so against libbfd*.so (#202327) - split *.a and header files into binutils-devel� ��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-3D�- on ppc and ppc64 increase default -z commonpagesize to 64K (#203001)� ��o�-Alexandre Oliva <aoliva@redhat.com> 2.17.50.0.3-2D�@- do not infer x86 arch implicitly based on instruction in the input (#200330)P��i;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-1D�{�- update to 2.17.50.0.3�|�� i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-8D��@- add support for new AMDFAM10 instructions (#198281, IT#97662) - add -march=/-mtune= gas support on x86/x86-64 - x86/x86-64 nop insn improvements - fix DT_GNU_HASH shift count value computation� ��i�+Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-7D���- add DT_GNU_HASH support (--hash-style=gnu and --hash-style=both ld options)|��~i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-4D���- fix i?86 TLS GD->IE transition in executables (#196157, BZ#2513)�)��}i�kJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-3D���- fix two places in ld that misbehaved with MALLOC_PERTURB_=N - fix .tls_common handling in relocatable linkingi��|imJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-2D� �- fix --as-needed (Alan Modra, #193689, BZ#2721)�A��{i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-1D~�- update to 2.17.50.0.2 - update from CVS to 20060601 - speed up the ELF linker by caching the result of kept section check (H.J. Lu)P��zi;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.1-1D`�@- update to 2.17.50.0.1�"��yi�]Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-6D-�- fix ld error message formatting, so that collect2 parser can parse it again for g++ -frepo (#187142)m��xooAlexandre Oliva <aoliva@redhat.com> 2.16.91.0.6-4D�- fix relaxation of TLS GD to LE on PPC (#184590)��wi�Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-3D/�- support DW_CFA_val_{offset,offset_sf,expression} in readelf/objdump�_��vi�WJakub Jelinek <jakub@redhat.com> 2.16.91.0.6-2D;@- add MNI support on i?86/x86_64 (#183080) - support S signal frame augmentation flag in .eh_frame, add .cfi_signal_frame support (#175951, PR other/26208, BZ#300)�L��ui�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-1C��@- update to 2.16.91.0.6 - fix ppc64 --gc-sections - disassembler fixes for x86_64 cr/debug regs - fix linker search order for DT_NEEDED libs�!��ti�[Jakub Jelinek <jakub@redhat.com> 2.16.91.0.5-1C��- update to 2.16.91.0.5 - don't error about .toc1 references to discarded sectiosn on ppc64 (#175944)r��siJakub Jelinek <jakub@redhat.com> 2.16.91.0.3-2C� @- put .gnu.linkonce.d.rel.ro.* sections into relro region7��rS Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��qi�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.3-1Ct��- update to 2.16.91.0.3 - add .weakref support (Alexandre Oliva, #115157, #165728)� ��pi�-Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-4Cx@- install-info also configure.info - update standards.texi from gnulib (#165530)���oi�;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-3C�@- update to 20050816 CVS - better fix for ld-cdtest - fix symbol version script parsing�%��ni�cJakub Jelinek <jakub@redhat.com> 2.16.91.0.2-2B�@- don't complain about relocs to discarded sections in ppc32 .got2 sections (Alan Modra, PR target/17828)P��mi;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-1B��- update to 2.16.91.0.2�n��li�uJakub Jelinek <jakub@redhat.com> 2.16.91.0.1-3Bߎ@- fix buffer overflow in readelf ia64 unwind printing code - use vsnprintf rather than vsprintf in gas diagnostics (Tavis Ormandy) - fix ld-cdtest when CFLAGS contains -fexceptionsQ��ki=Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-2B�<�- update to 20050720 CVSb��ji_Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-1B�_@- update to 2.16.91.0.1 plus 20050708 CVS c �! � ! Y � ~ < ��,��)��s�v-�>�@ � c ^�� iWJakub Jelinek <jakub@redhat.com> 2.18.50.0.6-2G�^@- backport .clmul -> .pclmul renamingw�� i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.6-1G�@- update to 2.18.50.0.6 - Intel AES, CLMUL, AVX/FMA support�%�� i�cJakub Jelinek <jakub@redhat.com> 2.18.50.0.4-2G��@- revert aranges optimization (Alan Modra, BZ#5303, BZ#5755) - fix ld-shared testcase for GCC 4.3 (H.J. Lu)P�� i;Jakub Jelinek <jakub@redhat.com> 2.18.50.0.4-1G��- update to 2.18.50.0.4i���?Fedora Release Engineering <rel-eng@fedoraproject.org> 2.18.50.0.3-2G��- Autorebuild for GCC 4.3~��i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.3-1G_�@- update to 2.18.50.0.3 - fix build with recent makeinfo (#415271)�D��k� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.18-1F�<@- update to 2.17.50.0.18 - GPLv3+ - preserve .note.gnu.build-id in objcopy --only-keep-debug (#251935) - fix sparc64/alpha broken by --build-id patch (#252936) - update License tag - fix ld crash with --build-id and non-ELF output format (Alan Modra, BZ#4923)g��kgJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-7F�$@- fix ppc32 secure PLT detection (Alan Modra)� ��k�1Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-6F�;@- rebuilt to make sure even libbfd.so and libopcodes.so aren't broken by #249435x��k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-5F��- add .note.gnu.build-id into default linker script (#249435)�^��k�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-4F��- don't kill the %{_gnu} part of target name on arm (Lennert Buytenhek, #243516) - create just one PT_NOTE segment header for all consecutive SHT_NOTE sectionsS��o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-3F� �- fix for ld --build-idS��o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-2F� @- ld --build-id supportR��k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-1F�Q@- update to 2.17.50.0.17R��k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.16-1Fn��- update to 2.17.50.0.16x��k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.12-4F �@- fix linking non-ELF input objects into ELF output (#235747)���k�MJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-3E��- don't require matching ELF_OSABI for target vecs with ELFOSABI_NONE, only prefer specific osabi target vecs over the generic ones (H.J.Lu, #230964, BZ#3826) - build libbfd.so and libopcodes.so with -Bsymbolic-functionsp��kyJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-2E��- ignore install-info errors from scriptlets (#223678)�U�� k�AJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-1E�@- update to 2.17.50.0.12 - revert the misdesigned LD_SYMBOLIC{,_FUNCTIONS} env var support, only support -Bsymbolic/-Bsymbolic-functions/--dynamic-list*d�� icJakub Jelinek <jakub@redhat.com> 2.17.50.0.9-1E�2@- update to 2.17.50.0.9 - fix tekhex reader]�� iUJakub Jelinek <jakub@redhat.com> 2.17.50.0.8-2E�@- fix --as-needed on ppc64 (#219629)v�� i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.8-1Er�@- update to 2.17.50.0.8 - initialize frch_cfi_data (BZ#3607)�C�� i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.7-1Ep@- update to 2.17.50.0.7 - .cfi_personality and .cfi_lsda directives, per subsection .cfi_* directives, better .eh_frame CIE merging~��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-3ES@- fix popcnt instruction assembly and disassembly on amd64 (#214767)�y��i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-2E<��- update to 2.17.50.0.6 - fix for section relative linker script defined symbols in empty sections (#207598, BZ#3267) - fix handling of DW_CFA_set_loc in .eh_frame optimizations - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation handling with weak undefined symbols (Alan Modra, #211094)l��isJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-6E�A- fix multilib conflict in %{_prefix}/include/bfd.hk��iqJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-5E�@- fix efi-app-ia64 magic number (#206002, BZ#3171) } l� � � '��R��v�J� } ���0�%Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.2-13I���- Rediff the symbolic-envvar-revert patch to comply with rpm patch --fuzz=0.� ��/i�SNick Clifton <nickc@redhat.com> 2.19.51.0.2-12I��- Rebase sources on 2.19.51.0.2 tarball. Remove linkonce-r-discard and gcc-expect-table patches.���.�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.1-11I��@- Fix .eh_frame_hdr build also for .gcc_except_table LSDA refs (BZ 461675).���-i�!Nick Clifton <nickc@redhat.com> 2.19.50.0.1-10Iy�@- Only require dejagnu if the testsuites are going to be run. (BZ 481169)� ��,g�WNick Clifton <nickc@redhat.com> 2.19.50.0.1-8I1.�- Add build-id patch to ensure that section contents are incorporated into a build id. (BZ 472152)� ��+c�_Nick Clifton <nickc@redhat.com> 2.19.50.0.1I&��- Rebase sources on 2.19.50.0.1 tarball. Update all patches, trimming those that are no longer needed.�6��*}�qJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-7I ��- Fix %{_prefix}/include/bfd.h on 32-bit hosts due the 64-bit BFD target support from 2.18.50.0.8-2 (BZ 468495).�e��)}�OJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-6I ��- binutils-devel now requires zlib-devel (BZ 463101 comment 5). - Fix complains on .gnu.linkonce.r relocations to their discarded .gnu.linkonce.t counterparts.� ��(}� Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-5H�- Remove %makeinstall to comply with the spu-binutils review (BZ 452211).���'}�-Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-4H�- Fix *.so scripts for multilib linking (BZ 463101, suggested by Jakub Jelinek).�F��&}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-3H�7@- Provide libbfd.so and libopcodes.so for automatic dependencies (BZ 463101). - Fix .eh_frame_hdr build on C++ files with discarded common groups (BZ 458950). - Provide --build and --host to fix `rpmbuild --target' biarch builds. - Include %{binutils_target}- filename prefix for binaries for cross builds. - Fix multilib conflict on %{_prefix}/include/bfd.h's BFD_HOST_64BIT_LONG_LONG.�l��%}�]Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-2H�N@- Package review, analysed by Jon Ciesla and Patrice Dumas (BZ 225615). - build back in the sourcedir without problems as gasp is no longer included. - Fix the install-info requirement. - Drop the needless gzipping of the info files. - Provide Obsoletes versions. - Use the %configure macro.�Y��$}�7Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-1H�6@- Update to 2.18.50.0.9. - Drop the ppc-only spu target pre-build stage (BZ 455242). - Drop parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - New .spec BuildRequires zlib-devel (/-static) for compressed sections. - Update .spec Buildroot to be more unique.�R��#}�)Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-2H���- Fix parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - Turn on 64-bit BFD support for i386, globally enable AC_SYS_LARGEFILE. - `--with debug' builds now with --disable-shared. - Removed a forgotten unused ld/eelf32_spu.c workaround from 2.18.50.0.8-1.�F��"}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-1H��@- Update to 2.18.50.0.8. - Drop the .clmul -> .pclmul renaming backport. - Add %{binutils_target} macro to support building cross-binutils. (David Woodhouse) - Support `--without testsuite' to suppress the testsuite run. - Support `--with debug' to build without optimizations. - Refresh the patchset with fuzz 0 (for new rpmbuild). - Enable the spu target on ppc/ppc64 (BZ 455242).�@��!}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-4H}�- include the `dist' tag in the Release number - libbfd.a symbols visibility is now hidden (for #447426, suggested by Jakub)��� }�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-3H}�- rebuild libbfd.a with -fPIC for inclusion into shared libraries (#447426) T ^ � � 0 � / � Y � ` � K�s�M��h���F � T � ��Nm�'Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-12KV�@- Fix --no-copy-dt-needed so that it will not complain about weak references.`��MmWNick Clifton <nickc@redhat.com> - 2.20.51.0.2-11K+n�- Add missing part of PR 11088 patch.c��Lm]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-10K* @- Apply patch for PR 11088. (BZ 544149)b��Kk]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-9K �@- Apply patch for PR 10856. (BZ 544358)x��Jq�Roland McGrath <roland@redhat.com> - 2.20.51.0.2-8K@- Build gold only for x86 flavors until others are tested.]��IqMRoland McGrath <roland@redhat.com> - 2.20.51.0.2-7K �- Add support for building gold.t��Hi�Jakub Jelinek <jakub@redhat.com> 2.20.51.0.2-5J�A- Fix up --copy-dt-needed-entries default. (Nick Clifton)�+��Gi�oJakub Jelinek <jakub@redhat.com> 2.20.51.0.2-4J�@- Fix ld -s with IRELATIVE relocations. (BZ 533321, PR ld/10911) - Add AMD Orochi LWP support, fix FMA4 support.�0��Fg�{Nick CLifton <nickc@redhat.com> 2.20.51.0.2-3J�@- Rename --add-needed to --copy-dt-needed-entries and improve error message about unresolved symbols in DT_NEEDED DSOs.�.��E}�aJan Kratochvil <jan.kratochvil@redhat.com> 2.20.51.0.2-2J��- Fix rpm --excludedocs (BZ 515922). - Fix spurious scriplet errors by `exit 0'. (BZ 517979, Nick Clifton)�H��Dg�+Nick Clifton <nickc@redhat.com> 2.20.51.0.2-1J�@- Rebase on 2.20 tarball. - Remove redundant moxie patch. - Remove redundant unique is global patch. - Remove redundant cxxfilt java doc patch.���C��Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.14-32J���- Remove spurious description of nonexistent --java switch for cxxfilt.���Bm�1Jakub Jelinek <jakub@redhat.com> 2.19.51.0.14-31Jz�- Fix strip on objects with STB_GNU_UNIQUE symbols. (BZ 515700, PR binutils/10492)� ��A�)�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.14-30Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild� ��@k�)Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�A- Rebase sources on 2.19.51.0.14 tarball. Gain fixes for PRs 10429 and 10433.�"��?k�[Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�@- Rebase sources on 2.19.51.0.13 tarball. Remove redundant orphan section placement patch. (BZ 512937)���>k�3Nick Clifton <nickc@redhat.com> 2.19.51.0.11-27J\sB- Add patch to allow moxie target to build, and hence --enable-targets=all to work.~��=k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-26J\sA- Import orphan section placement patch from mainline. (BZ 510384)x��<k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-25J\s@- Fix build-id patch to avoid memory corruption. (BZ 501582)y��;�sJan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.11-24JX~�- Provide uuencode output of the testsuite results.g��:kgNick Clifton <nickc@redhat.com> 2.19.51.0.11-23JI�@- Rebase sources on the 2.19.51.0.11 tarball.g��9kgNick Clifton <nickc@redhat.com> 2.19.51.0.10-22J?r@- Rebase sources on the 2.19.51.0.10 tarball.���8i�'Nick Clifton <nickc@redhat.com> 2.19.51.0.2-21J0�- Do not attempt to set execute permission on non-regular files. (BZ 503426)q��7k{Jakub Jelinek <jakub@redhat.com> 2.19.51.0.2-20J.N�- Fix .cfi_* skip over >= 64KB of code. (PR gas/10255)i��6imNick Clifton <nickc@redhat.com> 2.19.51.0.2-19J +@- Import fix for binutils PR #9938. (BZ 500295)��5i�Nick Clifton <nickc@redhat.com> 2.19.51.0.2-18I��@- Update IBM Power 7 support patch to fix tlbilx opcode. (BZ 494718)y��4i� Nick Clifton <nickc@redhat.com> 2.19.51.0.2-17I���- Add glibc-static to BuildRequires when running the testsuite._��3iYNick Clifton <nickc@redhat.com> 2.19.51.0.2-16I���- Add IBM Power7 support. (BZ 487887)Z��2iONick Clifton <nickc@redhat.com> 2.19.51.0.2-15I��@- Add IFUNC support. (BZ 465302)� ��1�'�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.2-14I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild H �� s 4 � F ��W�[��p�w�x�[�� � H b��kk]Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-2M�@- Import fix for PR ld/12851 (BZ 711268)g��jkgNick Clifton <nickc@redhat.com> - 2.21.52.0.1-1M�- Rebase on 2.21.52.0.1 tarball. (BZ 712025)g��ikgNick Clifton <nickc@redhat.com> - 2.21.51.0.9-1M�c@- Rebase on 2.21.51.0.9 tarball. (BZ 703105)W��hw;Peter Robinson <pbrobinson@gmail.com> - 2.21.51.0.8-3M���- Add ARM to BFD checksx��gk�Nick Clifton <nickc@redhat.com> - 2.21.51.0.8-2M��A- Delete plugins patch - enable plugins via configure option.Z��fkMNick Clifton <nickc@redhat.com> - 2.21.51.0.8-1M��@- Rebase on 2.21.51.0.8 tarball.Z��ekMNick Clifton <nickc@redhat.com> - 2.21.51.0.7-1M���- Rebase on 2.21.51.0.7 tarball.]��dkSNick Clifton <nickc@redhat.com> - 2.21.51.0.6-2Mv@- Enable gold plugins. (BZ 682852)Z��ckMNick Clifton <nickc@redhat.com> - 2.21.51.0.6-1MS�@- Rebase on 2.21.51.0.6 tarball.� ��b�%�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.21.51.0.5-4MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��ameJakub Jelinek <jakub@redhat.com> - 2.21.51.0.5-3MB��- Readd --build-id fix patch. (PR ld/12451)� ��`e�/Dan Horák <dan[at]danny.cz> - 2.21.51.0.5-2M%��- fix build on non-gold arches like s390(x) where both ld and ld.bfd is installed�$��_k�_Nick Clifton <nickc@redhat.com> - 2.21.51.0.5-1M$]@- Rebase on 2.21.51.0.5 tarball. - Delete redundant patches. - Fix gold+ld configure command line option.d��^geDan Horák <dan[at]danny.cz> - 2.20.51.0.12-2L��- "no" is not valid option for --enable-goldi��]miNick Clifton <nickc@redhat.com> - 2.20.51.0.12-1L�e�- Rebase on 2.20.51.0.12 tarball. (BZ 582160)i��\miNick Clifton <nickc@redhat.com> - 2.20.51.0.11-1L� �- Rebase on 2.20.51.0.11 tarball. (BZ 631771)���[m�#Nick Clifton <nickc@redhat.com> - 2.20.51.0.10-3LnnA- Allow ^ and ! characters in linker script wildcard patterns. (BZ 621742)l��ZmoNick Clifton <nickc@redhat.com> - 2.20.51.0.10-2Lnn@- Fix seg fault in sec_merge_emit(). (BZ 623687)� ��Ym�ONick Clifton <nickc@redhat.com> - 2.20.51.0.10-1La?@- Rebase on 2.20.51.0.10 tarball. - Import GOLD sources from binutils mainline as of 10 Aug 2010.� ��Xk�UNick Clifton <nickc@redhat.com> - 2.20.51.0.7-5L+1�- Rename the binutils-static package to binutils-devel in line with the Fedora packaging guidelines.�$��Wk�_Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-4L�@- Allow GOLD linker to parse "-l<name>" directives inside INPUT statements in linker scripts. (BZ 600553)a��Vk[Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-3K� @- Allow unique symbols in archive maps.���Uk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-2K͗@- Merge binutils-devel package into binutils-static package. (BZ 576300)�:��Tk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-1K��@- Rebase on 2.20.51.0.7 tarball. - Delete redundant patches: binutils-2.20.51.0.2-add-needed.patch, binutils-2.20.51.0.2-do-not-set-ifunc.patch, binutils-2.20.51.0.2-enable-gold.patch, binutils-2.20.51.0.2-gas-expr.patch, binutils-2.20.51.0.2-ifunc-ld-s.patch, binutils-2.20.51.0.2-lwp.patch, binutils-2.20.51.0.2-ppc-hidden-plt-relocs.patch, binutils-2.20.51.0.2-x86-hash-table.patch, - Do not allow unique symbols to be bound locally. (PR ld/11434) - Add support for DWARF4 debug information.���Sm�?Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-17K���- Do not set ELFOSABI_LINUX on binaries which just link to IFUNC using DSOs. (BZ 568941)w��Rm�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-16K���- Copy the OSABI field in ELF headers, if set. (BZ 568921)y��Qm�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-15KuB�- Create separate static and devel sub-packages. (BZ 556040)���Pm� Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-14Kh�- Fix seg-fault when linking mixed x86 and x86_64 binaries. (BZ 487472)n��OmsNick Clifton <nickc@redhat.com> - 2.20.51.0.2-13KY�@- Add a requirement for the coreutils. (BZ 557006) N i�k � A � Q � � � ]�x�?�H�u��B�I � N ��� k�=Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-5O���- Catch attempts to create a broken symbol index with archives > 4Gb in size. (#835957)_�� kWNick Clifton <nickc@redhat.com> - 2.22.52.0.4-4O�- Import fix for ld/14189. (#829311)���k�GNick Clifton <nickc@redhat.com> - 2.22.52.0.4-3O�- Fix handling of archives > 4Gb in size by importing patch for PR binutils/14302. (#835957)X��mGJakub Jelinek <jakub@redhat.com> - 2.22.52.0.4-2O�i�- Add minimal dwz -m support.e��kcNick Clifton <nickc@redhat.com> - 2.22.52.0.4-1O�F@- Rebase on 2.22.52.0.4 release. (#829027)e��kcNick Clifton <nickc@redhat.com> - 2.22.52.0.3-1O� �- Rebase on 2.22.52.0.3 release. (#819823)���k�#Nick Clifton <nickc@redhat.com> - 2.22.52.0.2-1O�~�- Rebase on 2.22.52.0.2 release. (#816514) - Retire binutils-2.22.52.0.1-weakdef.patch, binutils-2.22.52.0.1-ld-13621.patch, binutils-rh797752.patch, binutils-2.22.52.0.1-x86_64-hidden-ifunc.patch, binutils-2.22.52.0.1-tsx.patch and binutils-2.22.52.0.1-hidden-ifunc.patch. - Update binutils-2.22.52.0.1-reloc-on-by-default.patch.a��mYNick Clifton <nickc@redhat.com> - 2.22.52.0.1-12O��@- Include demangle.h in the devel rpm.m��mqNick Clifton <nickc@redhat.com> - 2.22.52.0.1-11Oz�@- Enable -zrelro by default for RHEL 7+. (#807831)l��omJakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-10Oc+@- Fix up handling of hidden ifunc relocs on i?86_�� _cJeff Law <law@redhat.com> - 2.22.52.0.1-9O`�@- Fix c++filt docs (2nd instance) (#797752)���m�!Jakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-8OWM�- Fix up handling of hidden ifunc relocs on x86_64 - Add Intel TSX supporth��~kiNick Clifton <nickc@redhat.com> - 2.22.52.0.1-7OU�@- Enable -zrelro by default. (#621983 #807831)P��}_EJeff Law <law@redhat.com> - 2.22.52.0.1-6OKp@- Fix c++filt docs (#797752)���|i� Mark Wielaard <mjw@redhat.com> - 2.22.52.0.1-5O;�@- Add upstream ld/13621 'dangling global hidden symbol in symtab' patch.Z��{wAAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-4O2c�- Actually apply the patchn��zwiAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-3O2c�- Add upstream weakdef.patch to fix RH #788107o��ykwNick Clifton <nickc@redhat.com> - 2.22.52.0.1-2O))A- Drat - forgot to upload the new tarball. Now done.�1��xk�yNick Clifton <nickc@redhat.com> - 2.22.52.0.1-1O))@- Rebase on 2.22.52 release. - Remove build-id.patch and gold-casts.patch as they are included in the 2.22.52 sources.~��w]�!Nick Clifton <nickc@redhat.com> - 2.22-4O �- Fix bug in GOLD sources parsing signed integers in command line options.i��v]yNick Clifton <nickc@redhat.com> - 2.22-3O �- Add casts for building gold with 4.7 version of gcc.���u��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.22-2O�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildL��t]?Nick Clifton <nickc@redhat.com> - 2.22-1Nˎ�- Rebase on 2.22 release.a��suQRicky Zhou <ricky@fedoraproject.org> - 2.21.53.0.2-2N��@- Rebuild libopcodes.a with -fPIC.���rk�Nick Clifton <nickc@redhat.com> - 2.21.53.0.2-1NA!@- Rebase on 2.21.53.0.2 tarball. Delete unneeded patches. (BZ 728677)e��qkcNick Clifton <nickc@redhat.com> - 2.21.53.0.1-3N7�- Update libiberty demangling. (BZ 727453)� ��pk�SNick Clifton <nickc@redhat.com> - 2.21.53.0.1-2N/��- Import Jakub Jelinek's patch to add support for displaying the contents of .debug_macro sections.���ok�Nick Clifton <nickc@redhat.com> - 2.21.53.0.1-1N%q�- Rebase on 2.21.53.0.1 tarball. Delete unneeded patches. (BZ 712668)W��nkGNick Clifton <nickc@redhat.com> - 2.21.52.0.1-5N|A- Import fix for PR ld/12921.� ��mk�SNick Clifton <nickc@redhat.com> - 2.21.52.0.1-4N|@- Run "alternatives --auto" to restore ld symbolic link if it was manually configured. (BZ 661247)���lk�;Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-3M��@- Fix seg-fault attempting to find a function name without a symbol table. (BZ 713471) w ��j W � Y � < � u � _��$�8�$�R�^�_�_�& w �*��(a�uJeff Law <law@redhat.com> - 2.23.52.0.1-10Q�@- Add libstdc++-static as a build requirement when running the testsuite. - Add remaining power8 support (#731883)���'k�?Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-9Q��- Add support for the alternative debuging files generated by the DWZ program. (#965255)���&k�MNick Clifton <nickc@redhat.com> - 2.23.52.0.1-8Qn��- Import patch for FSF mainline PR 15371 to fix ifunc references in shared libraries. (#927818)���%k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-7Qd�- Fix library search paths for 64-bit aarch64 linux targets. (#950098)u��$k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-6Q@j@- Add explicit requirement of /usr/bin/pod2man. (#920545)� ��#k�-Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-5Q9�- Reverts patch for PR15149 - prevents report weak DT_NEEDED symbols. (#918003)k��"koNick Clifton <nickc@redhat.com> - 2.23.52.0.1-4Q7/�- Enable building of GOLD for the ARM. (#908966)j��!kmNick Clifton <nickc@redhat.com> - 2.23.52.0.1-3Q4��- Fix errors reported by version 5.0 of texinfo.��� k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-2Q0�@- Fix the creation of index tables in 64-bit thin archives. (#915411)e�� kcNick Clifton <nickc@redhat.com> - 2.23.52.0.1-1Q/F�- Rebase on 2.23.51.0.1 release. (#916516)e�� kcNick Clifton <nickc@redhat.com> - 2.23.51.0.9-2Q�- Enable 64-bit BFD for aarch64. (#908904)��� k�KNick Clifton <nickc@redhat.com> - 2.23.51.0.9-1Q��- Rebase on 2.23.51.0.9 release. (#907089) - Retire binutils-2.23.51.0.8-arm-whitespace.patch.q�� k{Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-4P�-�- Allow more whitespace in ARM instructions. (#892261)� ��u� Patsy Franklin <pfrankli@redhat.com> - 2.23.51.0.8-3P�D�- Add bc to BuildRequires when running the testsuite. (#895321)c��k_Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-2P�!A- Add runtime link with libdl. (#889134)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.8-1P�!@- Rebase on 2.23.51.0.8 release. (#890382)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.7-1P�O@- Rebase on 2.23.51.0.7 release. (#889432)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.6-1P��@- Rebase on 2.23.51.0.6 release. (#880508)���k�ANick Clifton <nickc@redhat.com> - 2.23.51.0.5-1P�6@- Rebase on 2.23.51.0.5 release. (#876141) - Retire binutils-2.23.51.0.3-arm-ldralt.patchx��k�Nick Clifton <nickc@redhat.com> - 2.23.51.0.3-3P���- Rename ARM LDRALT instruction to LDALT. (#869025) PR/14575Z��oIJon Ciesla <limburgher@gmail.com> - 2.23.51.0.3-2P{��- Provides: bundled(libiberty)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.3-1Pj�@- Rebase on 2.23.51.0.3 release. (#858560)�1��k�yNick Clifton <nickc@redhat.com> - 2.23.51.0.2-1PO'�- Rebase on 2.23.51.0.2 release. (#856119) - Retire binutils-2.23.51.0.1-gold-keep.patch and binutils-rh805974.patch.c��[oJeff Law <law@redhat.com> 2.23.51.0.1-4PE�@- Correctly handle PLTOFF relocs for s390 IFUNCs.{��k� Karsten Hopp <karsten@redhat.com> 2.23.51.0.1-3P*=�- apply F17 commit cd2fda5 to honour {powerpc64} macro (#834651){��k� Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-2P*=�- Make GOLD honour KEEP directives in linker scripts (#8333355)���k�3Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-1P"T�- Rebase on 2.23.51.0.1 release. (#846433) - Retire binutils-2.22.52.0.4-dwz.patch, binutils-2.22.52.0.4-ar-4Gb.patch, binutils-2.22.52.0.4-arm-plt-refcount.patch, binutils-2.22.52.0.4-s390-64bit-archive.patch.��� k�'Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-8Pk�- Make the binutils-devel package depend upon the binutils package. (#845082)��� k�%Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-7Pk�- Disable checks that config.h is included before system headers. (#845084)y�� k� Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-6PS�- Use 64bit indicies in archives for s390 binaries. (#835957) � [�R � 9 � � 7 � � � b �.�5�co�2� �' � ��Da� Jeff Law <law@redhat.com> - 2.23.52.0.1-30T���- Fix syntax for multiple --enable-targets configure option. (#1133147)m��Ca}Jeff Law <law@redhat.com> - 2.23.52.0.1-29T�q@- Add support for crc instructions on aarch64 (#1179810)���Ba�%Jeff Law <law@redhat.com> - 2.23.52.0.1-28T�|�- Bring back spu target for ppc64le which was accidentally lost (#1133147)}��As� Richard Henderson <rth@redhat.com> - 2.23.52.0.1-27T� �- (Re-)Set ELF_COMMONPAGESIZE to 64k for ppc64le. (#1174826)� ��@w�%Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-26T��- Enable Intel AVX-512VL, AVX-512BW, AVX-512DQ and SGX support. (#1140375)�+��?e�sJeff Law <law@redhat.com> - 2.23.52.0.1-25.9S��@Revert this change (handled elsewhere): - Additional patch from Alan to fix problems with ld --defsym. (#1132732)���>e�-Jeff Law <law@redhat.com> - 2.23.52.0.1-23.9S�%@- Include powerpc-linux as a BFD target when building for ppc64le. (#1133147).�o��={�ePatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-22.9S�0�- Reduce the size of aarch64 .debug_line; fix cfi encoding of fp registers; add register names to dumping of aarch64 cfi data. Patch provided by rth. Resolves: #1132641�+��<{�]Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-21.9S�0�- This fixes a problem seen on powerpc64le ELFv2 when creating a function symbol alias with ld --defsym. st_other needs to be copied from the source symbol to the alias in order to set up the local entry offset for the alias.� ��;{�APatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-20.9S��- Correct handling of strong followed by weak def merging of st_other Resolves: #1130479e��:eiJeff Law <law@redhat.com> - 2.23.52.0.1-19.9S�S@- Add missing PPC opcodes Resolves: #1090618� ��9e�3Jeff Law <law@redhat.com> - 2.23.52.0.1-18.9S�@- Do not overwrite valid SONAME with empty string. (#1128279) Resolves: #1128280r��8usAldy Hernandez <aldyh@redhat.com> - 2.23.52.0.1-17.9S�u�- Initial support for ppc64le. Fix for bz#1125478X��7w=Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.9S� @- Backport fix for movi.^��6wIRichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.8S�h@- Backport support for IFUNCs.���5s�AMark Salter <msalter@redhat.com> - 2.23.52.0.1-16.7S�9@- Backport support for full range of CRn in AArch64 system registers. Fix for bz#1109497� ��4q�Kyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.6Su��- AArch64: Backport two patches from upstream fixing GOT handling.V��3s=Brendan Conoboy <blc@redhat.com> - 2.23.52.0.1-16.5St�@- Rebuild for BZ#1098169�n��2q�mKyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.4Sl�@- AArch64: Backport two fixes from upstream and add a draft patch to set DF_STATIC_TLS when emitting IE relocs. Also increase ELF_COMMONPAGESIZE to 64K to match the kernel.a��1wORichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.3SNp�- Backport tls-relax-gdesc-ie fixS��0w3Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.2S!��- Fix for rh1075827P��/q3Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-16.1S��- Fix for rh1066712S��.k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-16R�U�- Mass rebuild 2014-01-24k��-ayJeff Law <law@redhat.com> - 2.23.52.0.1-15R��@- Set _performance_build to get -O3 builds (#1051060).�%��,a�kJeff Law <law@redhat.com> - 2.23.52.0.1-14Rʚ�- Fix two may-be-uninitialized issues exposed by changes in compiler flags used to build binutils (#1048848).S��+k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-13R�k�- Mass rebuild 2013-12-27�-��*o�mJakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12R 7�- Add Intel AVX3, MPX and SHA support. - Add support for x86-64 -mcmodel=large -fpic TLS transitions. (#994244)� ��)a�aJeff Law <law@redhat.com> - 2.23.52.0.1-11Qֵ@- Add support for TDB notes section (#805115) - Fix length operands for cdzt, cxzt czdt and czxt (#805115) � ��( � � n / w � ?Y�| ���m� o��ZiyNick Clifton <nickc@redhat.com> 2.23.52.0.1-56V���- Remove __PPC__ checks from BFD library. (#1261016)� ��Yi�-Nick Clifton <nickc@redhat.com> 2.23.52.0.1-55V �@- Add missing delta to patch that fixes parsing corrupted archives. (#1162666)���Xi�;Nick Clifton <nickc@redhat.com> 2.23.52.0.1-54U��@- Import patch for PR 18270: Create AArch64 GOT entries for local symbols. (#1238783)���Wc�%Jeff Law <law@redhat.com> - 2.23.52.0.1-51U�n�- Fix incorrectly generated binaries and DSOs on PPC platforms. (#1247126)z��Vm� Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-50U�3E- Fix memory corruption parsing corrupt archives. (#1162666)p��UmwNick Clifton <nickc@redhat.com> - 2.23.52.0.1-49U�3D- Fix directory traversal vulnerability. (#1162655)l��TmoNick Clifton <nickc@redhat.com> - 2.23.52.0.1-48U�3C- Fix stack overflow in SREC parser. (#1162621)���Sm�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-47U�3B- Fix stack overflow whilst parsing a corrupt iHex file. (#1162607)���Rm�ENick Clifton <nickc@redhat.com> - 2.23.52.0.1-46U�3A- Fix out of bounds memory accesses when parsing corrupt PE binaries. (#1162594, #1162570)�5��Qm�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45U�3@- Change strings program to default to -a. Fix problems parsing files containg corrupt ELF group sections. (#1157276)�a��Pa�cJeff Law <law@redhat.com> - 2.23.52.0.1-44U�J@- Avoid reading beyond function boundary when disassembling. (#1060282) - For binary ouput, we don't have an ELF bfd output so can't access elf_elfheader. (#1226864)u��Oa� Jeff Law <law@redhat.com> - 2.23.52.0.1-43Ug@- Do not discard stap probe note sections on aarch64 (#1225091)�:��Na�Jeff Law <law@redhat.com> - 2.23.52.0.1-42Ud`@- Clamp maxpagesize at 1 (rather than 0) to avoid segfaults in the linker when passed a bogus max-page-size argument. (#1203449)�3��Mo�yMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-41U]�- Fixup bfd elf_link_add_object_symbols for ppc64 to prevent subsequent uninitialized accesses elsewhere. (#1172766)�S��La�GJeff Law <law@redhat.com> - 2.23.52.0.1-40UKS�- Minor testsuite adjustments for PPC changes in -38/-39. (#1183838) Fix md_assemble for PPC to handle arithmetic involving the TOC better. (#1183838)c��Ko[Martin Sebor <msebor@redhat.com> - 2.23.52.0.1-39UJA- Fix ppc64: segv in libbfd (#1172766).o��JosMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-38UJ@- Unconditionally apply ppc64le patches (#1183838).�)��Ia�sJeff Law <law@redhat.com> - 2.23.52.0.1-37UG_@- Andreas's backport of z13 and dependent fixes for s390, including tesetcase fix from Apr 27, 2015.' (#1182153)���Ha�IJeff Law <law@redhat.com> - 2.23.52.0.1-35U#�- Fixup testsuite for AArch64 (#1182111) - Add support for @localentry for LE PPC64 (#1194164)b��GagJeff Law <law@redhat.com> - 2.23.52.0.1-34U�@- Do not install windmc(1) man page (#850832)� ��Fa�3Jeff Law <law@redhat.com> - 2.23.52.0.1-33UF@- Do not replace R_390_TLS_LE{32,64} with R_390_TLS_TPOFF for PIE (#872148) - Enable relro by default for arm and aarch64 (#1203449) - Backport 3 RELRO improvements for ppc64/ppc64le from upstream (#1175624)`��EacJeff Law <law@redhat.com> - 2.23.52.0.1-31U .@- Backport upstream RELRO fixes. (#1200138) T $ � : � P���:���|�� � T ���oi�#Nick Clifton <nickc@redhat.com> 2.25.1-26-baseX|��- Speed up displaying disassembly when mixed with source code. (#1311352)� ��ni�YNick Clifton <nickc@redhat.com> 2.25.1-25-baseX|��- Fix GOLD so that it will not warn about references to hidden symbols in shared objects. (#1326710)e��mieNick Clifton <nickc@redhat.com> 2.25.1-24-baseXo��- Fix thinko in previous patch. (#1406430)� ��li�/Nick Clifton <nickc@redhat.com> 2.25.1-23-baseXo��- Add code to detect attempts to link PIE and non-PIE S390 binaries. (#1406430)� ��ki�Nick Clifton <nickc@redhat.com> 2.25.1-22-baseW�tA- Fix date format bug in changelog which was preventing package build.���ji� Nick Clifton <nickc@redhat.com> 2.25.1-21-baseW�t@- Add support for Z13 extensions to IBMs s390 architecture. (#1364516)x��ii� Nick Clifton <nickc@redhat.com> 2.25.1-20-baseWm �- Import new PPC ISA 3.0 patch from FSF binutils. (#1341730)���hi�=Nick Clifton <nickc@redhat.com> 2.25.1-19-baseW^�A- Add support for the .arch_extension pseudo-op to the AArch64 port of GAS. (#1276755)u��gi�Nick Clifton <nickc@redhat.com> 2.25.1-18-baseW^�@- Update patch to fix AArch64 stub generation. (#1243559)� ��fi�YNick Clifton <nickc@redhat.com> 2.25.1-17-baseWP �- Close memory leak in "ar" archiver program. (#1162655) - Retire the copy-osabi patch. (#1252066)}��ei�Nick Clifton <nickc@redhat.com> 2.25.1-16-baseWP �- Version bump to allow adding 1300543 to the errata. (#1300543)}��di�Nick Clifton <nickc@redhat.com> 2.25.1-15-baseWN�@- Extend Power9 patch to add new ISA 3.0 instructions. (#1341730)�Y��ci�KNick Clifton <nickc@redhat.com> 2.25.1-14-baseWE��- Extend Release string to include ".base" thus ensuring that it will not collide with a DTS release which might otherwise have the same name. (#1337617)���b_�MNick Clifton <nickc@redhat.com> 2.25.1-13WB�- Add support for Zeppelin x86 extensions. - Add support for the AMD MWAITX extension. - Add support for the PowerPC Power9 architecture. - Remove spurious binutils document references. (#1335313) (#1335684) (#1333305)���a_�SNick Clifton <nickc@redhat.com> 2.25.1-10W4�- Allow the BFD library to locate debug info files below the /usr/lib/debug directory. (#1311352)v��`]�Nick Clifton <nickc@redhat.com> 2.25.1-9W ��- Housekeeping: Delete unused patches. Renumber existing patches.l��_]Nick Clifton <nickc@redhat.com> 2.25.1-8VՄ@- Fix PowerPC gas and ld testsuite failures. (#1312876)f��^]sNick Clifton <nickc@redhat.com> 2.25.1-7V�I�- Extend fix for AArch64 call veneers. (#1243559)|��]]� Nick Clifton <nickc@redhat.com> 2.25.1-6V�`�- Add support for Intel Memory Protection Key instructions. (#1304451)�v��\]�Nick Clifton <nickc@redhat.com> 2.25.1-4V��@- Improve warning message for overflowing AArch64 relocs. - Import patch to fix PR18668. - Ignore warning messages about duplicate FDE entries (#1300543) (#1300603) (#1285614) (#1243559)�\��[]�]Nick Clifton <nickc@redhat.com> 2.25.1-3V�T@- Experimental rebase on FSF 2.25.1 sources. (#1341730) - Retire: patch11, patch12, patch13, patch14, patch15, patch16, patch17, patch18, patch19, patch20, patch21, patch22, patch23, patch24, patch25, patch26, patch27, patch28, patch29, patch30, patch32, patch100, patch101, patch102, patch110, patch111, patch112, patch113, patch114, patch115, patch116, patch117, patch118, patch119, patch120, patch121, patch201, patch202, patch203, patch204, patch205, patch206, patch207, patch208, patch209, patch210, patch211, patch212, patch300, patch301, patch302, patch303, patch304, patch305, patch306, patch307, patch308, patch309, patch400, patch401, patch402, patch403, patch404, patch405, patch406, patch407, patch501 - Add patch to suppress checking of PPC64 TLBIE instruction. [TEMPORARY] - Add fix for FSF PR 18879 - Add fix for s390x linker testsuite failure. (#1276755) (#1260158) (#1300734) (#1288068) g {�` � M h�P�'�3�]�,��^ � g ���g� Nick Clifton <nickc@redhat.com> 2.27-27.baseZWQ�- Do enable relro by default for the PowerPC64 architecture. (#1523946)l��guNick Clifton <nickc@redhat.com> 2.27-26.baseZN@- Fix thinko in post-uninstall section. (#1520899)���g�=Nick Clifton <nickc@redhat.com> 2.27-25.baseZKtA- Remove man and info files not needed when building without documentation. (#1530339)���g�INick Clifton <nickc@redhat.com> 2.27-24.baseZKt@- Check for the existance of standards.info.gz before attempting to uninstall it. (#1520899)���g�INick Clifton <nickc@redhat.com> 2.27-23.baseZ8�@- Do not complain if the standards.info.gz file does not exist when uninstalling. (#1520899)��� g�'Nick Clifton <nickc@redhat.com> 2.27-22.baseZ.s@- Do not enable relro by default for the PowerPC64 architecture. (#1523946)�!��e�_Nick Clifton <nickc@redhat.com> 2.27-21.baseZ }�- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections. (#1513014)�8��~e� Nick Clifton <nickc@redhat.com> 2.27-20.baseY��- Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs. (#1508954)�*��}e�qNick Clifton <nickc@redhat.com> 2.27-19.baseY�|�- Suppress the generation of R_X86_64_GOTPCRELX, R_X86_64_REX_GETPCRELX and R_386_GOT32X relocations. (#1506004)f��|ekNick Clifton <nickc@redhat.com> 2.27-18.baseYܶ@- Update AArch64 copy reloc patch. (#1430743)x��{e� Nick Clifton <nickc@redhat.com> 2.27-17.baseY��@- Add LNIA, SCV and RFSCV instructions from Power9. (#1356856)t��ze�Nick Clifton <nickc@redhat.com> 2.27-16.baseY��@- Fix seg-fault when stripping s390x binaries. (#14888890)� ��ye�/Nick Clifton <nickc@redhat.com> 2.27-15.baseY���- Add support for creating a PT_S390_PGSTE segment in s390 binaries. (#1485398)���xe�INick Clifton <nickc@redhat.com> 2.27-14.baseY���- Add standards.info file to documentation distributed with the binutils package. (#1467390)���we�ANick Clifton <nickc@redhat.com> 2.27-12.baseY��A- Generate an error when attempting to link non-PIC s390 objects in PIE mode. (#1406430)}��ve�Nick Clifton <nickc@redhat.com> 2.27-11.baseY��@- Fix generation of dynamic COPY relocs for the AArch64. (#1452170)�`��ue�]Nick Clifton <nickc@redhat.com> 2.27-10.baseY��@- Rebase to binutils 2.27 + Retire: binutils-2.20.51.0.2-ia64-lib64.patch + Retire: binutils-2.20.51.0.10-copy-osabi.patch + Retire: binutils-rh1260158.patch + Retire: binutils-rh1300734.patch + Retire: binutils-2.25.1-aarch64-overflow-warnings.patch + Retire: binutils-2.25-aarch64-pr18668.patch + Retire: binutils-2.25.1-aarch64-pagesize.patch + Retire: binutils-rh1304451.patch + Retire: binutils-2.25.1-x86-Zepplin.patch + Retire: binutils-2.25.1-power9.patch + Retire: binutils-2.25.1-x86-mwaitx.patch + Retire: binutils-rh1162655.patch + Retire: binutils-2.25.1-aarch64-arch-extension.patch + Retire: binutils-2.25.1-s390-z13.patch + Retire: binutils-2.25.1-gold-resolving-to-hidden-symbols.patch - Sync with Pegas 1.1 binutils. - Import patch to add support for DWARF5 tags. (#1472955) - Import patch to fix converting addresses into function names. (#1465318)(#1452170) - Add support for ARMv8.2 ISA extensions. (#1385959)� ��ti�3Nick Clifton <nickc@redhat.com> 2.25.1-33.baseYw2�- Add support for new tags defined by version 5 of the DWARF standard. (#1472955)}��si�Nick Clifton <nickc@redhat.com> 2.25.1-32.baseYw2�- Remove the minmax part of the objdump speedup patch. (#1465318)y��ri� Nick Clifton <nickc@redhat.com> 2.25.1-31.baseY�@- Fix generation of PLT entries for s390 binaries. (#1440168)���qi�KNick Clifton <nickc@redhat.com> 2.25.1-28-baseY �- Disable fix for 1406430. It breaks building real s390 executables. (#1447209) (#1406430)� ��pi�Nick Clifton <nickc@redhat.com> 2.25.1-27-baseY�@- Fix infnite loop in linker when counting PowerPC stubs. (#1406498) I � � c � p p � ]�g�h�.<�M � I � ��S�GCristian Gafton <gafton@redhat.com>4��@- updated to 2.8.1.0.15 (required to compile the newer glibc) - all patches are obsoleted nowo��C� Erik Troan <ewt@redhat.com>4M�- added 2.8.1.0.1 patch from hj - added patch for alpha palcode form rth�a����'Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c���o�Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��g�uNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� ��g�WNick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)���g�?Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h��gmNick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)���g�7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s��g�Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){��g�Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)���g�9Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�� g�Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)�{�� g�Nick Clifton <nickc@redhat.com> 2.27-34.base[�@- Fix seg-fault parsing corrupt AOUT format files. (#1579799) - Fix seg-fault parsing corrupt DWARF2 debug information. (#1579802) - Fix seg-fault parsing corrupt ELF format files. (#1579801)��� g�9Nick Clifton <nickc@redhat.com> 2.27-33.baseZ�n�- Fix seg-fault parsing ELF files. (#1578979) - Fix seg-fault parsing DWARF-2 information. (#1579065) - Fix seg-fault parsing DWARF-2 information. (#1579051) - Fix seg-fault parsing a PE format file. (#1579019)�Z�� g�ONick Clifton <nickc@redhat.com> 2.27-32.baseZ� @- Fix seg-fault parsing DWARF-1 information. (#1569580) - Fix seg-fault parsing DWARF-2 information. (#1569891) - Fix seg-fault parsing COFF files. (#1571917)x�� g� Nick Clifton <nickc@redhat.com> 2.27-31.baseZ�@- Allow "lea foo@GOT, %reg" in PIC mode on the x86. (#1573872)�+��g�qNick Clifton <nickc@redhat.com> 2.27-30.baseZ��@- Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.{��g�Nick Clifton <nickc@redhat.com> 2.27-29.baseZ��- Add support for the GLOBALAUDIT dynamic linker tag. (#1439351)�m��g�uNick Clifton <nickc@redhat.com> 2.27-28.baseZ��- Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section. (#1557346) - Stop strip from replacing unknown relocs with null relocs. (#1545386) * � �N � ~ � 6 � � g # � 5 � "h�r/��-�Z��d!��W ��X��g � ���CM�QJakub Jelinek <jakub@redhat.com>:��- 2.10.1.0.7 - remove ExcludeArch ia64 - back out the -oformat, -omagic and -output change for nowF��BMCJakub Jelinek <jakub@redhat.com>::�- Prereq /sbin/install-info7��AM%Jakub Jelinek <jakub@redhat.com>:c�- 2.10.1.0.2E��@MAJakub Jelinek <jakub@redhat.com>:c�- add one more alpha patchi��?M�Jakub Jelinek <jakub@redhat.com>:z�- fix alpha visibility as problem - add support for Ultra-IIIE��>MAJakub Jelinek <jakub@redhat.com>9�A- and one more alpha patch>��=M3Jakub Jelinek <jakub@redhat.com>9�@- two sparc patches6��<M#Jakub Jelinek <jakub@redhat.com>9|/�- 2.10.0.186��;M#Jakub Jelinek <jakub@redhat.com>9i��- 2.10.0.125��:M!Jakub Jelinek <jakub@redhat.com>9WE�- 2.10.0.96��9M#Jakub Jelinek <jakub@redhat.com>9H�@- fix ld -rS��8M]Jakub Jelinek <jakub@redhat.com>9;�@- 2.9.5.0.46 - use _mandir/_infodir/_lib?��7]%Bernhard Rosenkraenzer <bero@redhat.com>9�@- 2.9.5.0.41?��6]%Bernhard Rosenkraenzer <bero@redhat.com>8�e@- 2.9.5.0.34?��5]%Bernhard Rosenkraenzer <bero@redhat.com>8ص�- 2.9.5.0.31l��4S�Cristian Gafton <gafton@redhat.com>8��@- man pages are compressed - apply kingdon's patch from #5031d��3G�Jeff Johnson <jbj@redhat.com>8��@- Permit package to be built with a prefix other than /usr.g��2SCristian Gafton <gafton@redhat.com>8}�@- add pacth from hjl to fix the versioning problems in ldx��1]�Bernhard Rosenkraenzer <bero@redhat.com>8{@- Add sparc patches from Jakub Jelinek <jakub@redhat.com> - Add URL:?��0]%Bernhard Rosenkraenzer <bero@redhat.com>8V1@- 2.9.5.0.22?��/]%Bernhard Rosenkraenzer <bero@redhat.com>8;�@- 2.9.5.0.19?��.]%Bernhard Rosenkraenzer <bero@redhat.com>8�- 2.9.5.0.16j��-O�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- make shared non-pic libraries work on sparc with glibc 2.1.���,#�eJim Kingdon7�}�- No source/spec changes, just rebuilding with egcs-1.1.2-18 because the older egcs was miscompling gprof.�5��+S�Cristian Gafton <gafton@redhat.com>7$U@- back out very *stupid* sparc patch done by HJLu. People, keep out of things you don't understand. - add alpha relax patch from rth�*��*S�Cristian Gafton <gafton@redhat.com>7��- version 2.9.1.0.23 - patch to make texinfo documentation compile - auto rebuild in the new build environment (release 2)`��)SqCristian Gafton <gafton@redhat.com>6Ҙ@- updated to 2.9.1.0.21 - merged with UltraPenguin� ��(S�mCristian Gafton <gafton@redhat.com>6��@- added ARM patch from philb - version 2.9.1.0.19a - added a patch to allow arm* arch to be identified as an ARMF��'S=Cristian Gafton <gafton@redhat.com>6n�- updated to 2.9.1.0.14.@��&G=Jeff Johnson <jbj@redhat.com>6��- updated to 2.9.1.0.13.E��%S;Cristian Gafton <gafton@redhat.com>5�m�- updated to 2.9.1.0.12?��$G;Jeff Johnson <jbj@redhat.com>5�v@- updated to 2.9.1.0.7.?��#G;Jeff Johnson <jbj@redhat.com>5u:�- updated to 2.9.1.0.6.���"C�GErik Troan <ewt@redhat.com>5s�@- added patch from rth to get right offsets for sections in relocateable objects on sparc32T��!SYProspector System <bugs@redhat.com>5Q�@- translations modified for de, fr, trc�� SwCristian Gafton <gafton@redhat.com>5N�A- version 2.9.1.0.4 is out; even more, it is public !?�� G;Jeff Johnson <jbj@redhat.com>5N�@- updated to 2.9.1.0.3.B�� S5Cristian Gafton <gafton@redhat.com>5;8�- updated to 2.9.0.3C�� S7Cristian Gafton <gafton@redhat.com>53O�- upgraded to 2.9.0.2�H�� S�?Cristian Gafton <gafton@redhat.com>5'r@- updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target... :-) - "fixed" the damn make install command so that all tools get installed���S�[Cristian Gafton <gafton@redhat.com>5#}�- upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile) - added info packages handlingF��S=Cristian Gafton <gafton@redhat.com>5+@- upgraded to 2.8.1.0.23 � �n�> v ' � t � � B � v}��$�X�� � ���]k�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-6< �@- one more .eh_frame patch fix - fix alpha .eh_frame handling - optimize elf-strtab finalizec��\k_Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-5<;@- yet another fix for the .eh_frame patchs��[kJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-4<�- Alan Modra's patch to avoid crash if there is no dynobj�W��Zk�EJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3<�@- H.J.'s patch to avoid crash if input files are not ELF - don't crash if a SHF_MERGE for some reason could not be merged - fix objcopy/strip to preserve SHF_MERGE sh_entsize - optimize .eh_frame sections, add PT_GNU_EH_FRAME support - support anonymous version tags in version scriptX��YkIJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-2<�A- fix IA-64 SHF_MERGE handling�k��Xk�mJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1<�@- update to 2.11.92.0.12 - optimize .dynstr and .shstrtab sections (#55524) - fix ld.1 glitch (#55459) - turn relocs against SHF_MERGE local symbols with zero addend into STT_SECTION + addend - remove man pages for programs not included (nlmconv, windres, dlltool; - add BuildRequires for texinfoc��WiaJakub Jelinek <jakub@redhat.com> 2.11.92.0.7-2;��- duh, fix strings on bfd objects (#55084)���Vi� Jakub Jelinek <jakub@redhat.com> 2.11.92.0.7-1;�g@- update to 2.11.92.0.7 - remove .rel{,a}.dyn from output if it is empty���Ui�;Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-2;ʼn�- fix strings patch - use getc_unlocked in strings to speed it up by 50% on large files�P��Ti�9Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1;�8@- update to 2.11.92.0.5 - binutils localization (#45148) - fix typo in REPORT_BUGS_TO (#54325) - support files bigger than 2GB in strings (#54406)���Sk�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-12;��@- on IA-64, don't mix R_IA64_IPLTLSB relocs with non-PLT relocs in .rela.dyn section.�]��Rk�QJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11;�q�- add iplt support for IA-64 (Richard Henderson) - switch to new section flags for SHF_MERGE and SHF_STRINGS, put in compatibility code - "s" section flag for small data sections on IA-64 and Alpha (Richard Henderson) - fix sparc64 .plt[32768+] handling - don't emit .rela.stab on sparcR��Qk=Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-10;��@- fix SHF_MERGE on Sparcr��PiJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-9;�|@- on Alpha, copy *r_offset to R_ALPHA_RELATIVE's r_addend�5��Oi�Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8;�*�- on IA-64, put crtend{,S}.o's .IA_64.unwind section last in .IA_64.unwind output section (for compatibility with 7.1 eh)� ��Ni�SJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-7;�A�- put RELATIVE relocs first, not last - enable -z combreloc by default on IA-{32,64}, Alpha, Sparc*�Q��Mi�;Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6;��@- support for -z combreloc - remove .dynamic patch, -z combreloc patch does this better - set STT_FUNC default symbol sizes in .endp directive on IA-64R��Li?Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-5;R�@- fix last patch (H.J.Lu)Y��KiMJakub Jelinek <jakub@redhat.com> 2.11.90.0.8-4;N�- fix placing of orphan sectionsK��JMMJakub Jelinek <jakub@redhat.com>;4��- fix SHF_MERGE support on Alpha�C��IM�;Jakub Jelinek <jakub@redhat.com>; �@- 2.11.90.0.8 - some SHF_MERGE suport fixes - don't build with tooldir /usrusr instead of /usr (#40937) - reserve few .dynamic entries for prelinkingN��HMSJakub Jelinek <jakub@redhat.com>:��- 2.11.90.0.5 - SHF_MERGE support���GM�7Jakub Jelinek <jakub@redhat.com>:ɻ@- 2.11.90.0.4 - fix uleb128 support, so that CVS gcc bootstraps - some ia64 fixesT��FM_Jakub Jelinek <jakub@redhat.com>:��- add -Bgroup support from Ulrich DrepperR��EM[Jakub Jelinek <jakub@redhat.com>:��- hack - add elf_i386_glibc21 emulation8��DM'Jakub Jelinek <jakub@redhat.com>:�@- 2.10.91.0.2 � �r q � � � P � N�g�N3�:��-Y � �N��ui�5Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1=��@- update to 2.13.90.0.4 - x86-64 TLS support - some IA-32 TLS fixes - some backported patches from trunk - include opcodes, ld, gas and bfd l10n too�O��ti�7Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3=��@- allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff - clear memory at *r_offset of dynamic relocs on PPC - avoid ld crash if accessing non-local symbols through LE relocs - new IA-32 TLS relocs, bugfixes and testcases - use brl insn on IA-64 (Richard Henderson) - fix R_IA64_PCREL21{M,F} handling (Richard Henderson) - build in separate builddir, so that gasp tests don't fail - include localization]��siUJakub Jelinek <jakub@redhat.com> 2.13.90.0.2-2=R]@- fix R_386_TPOFF32 addends (#70824)�}��ri�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1=K�- update to 2.13.90.0.2 - fix ld TLS assertion failure (#70084) - fix readelf --debug-dump= handling to match man page and --help (#68997) - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)�%��qk�aJakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1=>��- update to 2.12.90.0.15 - TLS .tbss fix - don't use rpm %configure macro, it is broken too often (#69366)���pi�7Jakub Jelinek <jakub@redhat.com> 2.12.90.0.9-1<�@- update to 2.12.90.0.9 - TLS support - remove gasp.info from %post/%preun (#65400)a��oi]Jakub Jelinek <jakub@redhat.com> 2.12.90.0.7-1<�5�- update to 2.12.90.0.7 - run make check���nk�CJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12<�5�- fix .hidden handling on SPARC (Richard Henderson) - don't crash when linking -shared non-pic code with SHF_MERGE - fix .eh_frame_hdr for DW_EH_PE_aligned - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs���mk�EJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-11<���- don't emit dynamic R_SPARC_DISP* relocs against STV_HIDDEN symbols into shared librariesy��lk� Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-10<��@- don't merge IA-64 unwind info sections together during ld -rm��kiuJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-9<��@- fix DATA_SEGMENT_ALIGN on ia64/alpha/sparc/sparc64r��jiJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-8<���- don't crash on SHN_UNDEF local dynsyms (Andrew MacLeod)]��iiUJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-7<�V@- fix bfd configury bug (Alan Modra)� ��hi�QJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-6<��A- don't copy visibility when equating symbols - fix alpha .text/.data with .previous directive bug� ��gi�+Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-5<��@- fix SHF_MERGE crash with --gc-sections (#60369) - C++ symbol versioning patch�_��fi�WJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4<v2�- add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs, if DW_EH_PE_absptr cannot be converted that way, don't build the .eh_frame_hdr search tableY��eiMJakub Jelinek <jakub@redhat.com> 2.11.93.0.2-3<l�@- fix ld -N broken by last patch�7��di�Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2<i�- trade one saved runtime page for data segment (=almost always not shared) for up to one page of disk space where possible���ci�;Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-1<c��- update to 2.11.93.0.2 - use %{ix86} instead of i386 for -z combreloc default (#59086)���bm�?Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-10<Y1�- don't create SHN_UNDEF STB_WEAK symbols unless there are any relocations against themc��awSBill Nottingham <notting@redhat.com> 2.11.92.0.12-9.1<W�@- rebuild (fix ia64 miscompilation):��`E3Tim Powers <timp@redhat.com><<0�- automated rebuild]��_kSJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-8<,^�- two further .eh_frame patch fixes�j��^k�kJakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7< �@- as ld is currently not able to shrink input sections to zero size during discard_info, build a fake minimal CIE in that case - update elf-strtab patch to what was commited � 5�+ � � Q � � k����o�<�M�M � � ��k�-Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-3>�-�- make elf64ppc target native extra on ppc and elf32ppc native extra on ppc64._��kWJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-2>�9@- fix TLS on IA-64 with ld relaxationR�� k=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-1>|P@- update to 2.13.90.0.20C�� k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-9>Z B- rebuilt��� k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-8>Z A- don't strip binaries in %install, so that there is non-empty debuginfoa�� k[Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-7>Z @- don't optimize .eh_frame during ld -r�F�� k�#Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6>K��- don't clear elf_link_hash_flags in the .symver patch - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME (Alan Modra)���k�'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5>G�B- fix the previous .symver change - remove libbfd.so and libopcodes.so symlinks, so that other packages link statically, not dynamically against libbfd and libopcodes whose ABI is everything but stable���k� Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-4>G�A- do .symver x, x@FOO handling earlier - support .file and .loc on s390*�N��k�3Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3>G�@- handle .symver x, x@FOO in ld such that relocs against x become dynamic relocations against x@FOO (#83325) - two PPC64 TLS patches (Alan Modra)���k�=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2>FB�- fix SEARCH_DIR on x86_64/s390x - fix Alpha --relax - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt and no .rela.dyn section - support IA-32 on IA-64 (#83752) - .eh_frame_hdr fix (Andreas Schwab)p��kyJakub Jelinek <jakub@redhat.com> 2.13.90.0.18-1>BN@- update to 2.13.90.0.18 + 20030121->20030206 CVS diff�4��k�Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8>?�@- alpha TLS fixes - use .debug_line directory table to make the section tiny bit smaller - libtool fix from Jens PetersenG��k'Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-7>=@- sparc32 TLSh��kiJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-6>1*�- s390{,x} TLS and two other mainframe patches��� k�KJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-5>'�@- fix IA-64 TLS IE in shared libs - .{preinit,init,fini}_array compat hack from Alexandre Oliva���k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-4>&��- IA-64 TLS fixes - fix .plt sh_entsize on Alpha - build with %_smp_mflagsc��~k_Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-3=�@- fix strip on TLS binaries and librariesR��}k=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-2=�V�- fix IA-64 ld bootstrapj��|kmJakub Jelinek <jakub@redhat.com> 2.13.90.0.16-1=�@- update to 2.13.90.0.16 - STT_TLS SHN_UNDEF fix�E��{k�!Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4=�- pad .rodata.cstNN sections at the end if they aren't sized to multiple of sh_entsize - temporary patch to make .eh_frame and .gcc_except_table sections readonly if possible (should be removed when AUTO_PLACE is implemented) - fix .PPC.EMB.apuinfo section flags�.��zk�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3=��@- fix names and content of alpha non-alloced .rela.* sections (#76583) - delete unpackaged files from the buildrootk��ykoJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-2=�@- enable s390x resp. s390 emulation in linker too�0��xk�wJakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1=���- update to 2.13.90.0.10 - add a bi-arch patch for sparc/s390/x86_64 - add --enable-64-bit-bfd on sparc, s390 and ppcQ��wi=Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-3=�k�- fix combreloc testcase�F��vi�%Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2=�k�- fix orphan .rel and .rela section placement with -z combreloc (Alan Modra) - skip incompatible linker scripts when searching for libraries � M�b � U � ) d � N � -v�} � Vf�t�%� � � C��-k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-23?�@- rebuilt�I��,k�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22?��- fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661) - don't access memory beyond what was allocated in readelf (Richard Henderson)g��+kgJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-21? U@- add .cfi_* support on ppc{,64} and s390{,x}_��*kWJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-20? �@- remove lib{bfd,opcodes}.la (#98190)�g��)k�eJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19? `�- fix -pie support on amd64, s390, s390x and ppc64 - issue relocation overflow errors for s390/s390x -fpic code when accessing .got slots above 4096 bytes from .got startC��(k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-18?�- rebuilt�&��'k�cJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17?�- fix ia64 -pie support - require no undefined non-weak symbols in PIEs like required for normal binaries�$��&k�_Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16?�@- fix readelf -d on IA-64 - build libiberty.a with -fPIC, so that it can be lined into shared librariesC��%k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-15>���- rebuilt�0��$k�wJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14>���- added support for Intel Prescott instructions - fix hint@pause for ia64 - add workaround for LTP sillyness (#97934)�G��#k�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13>�T@- update CFI stuff to 2003-06-18 - make sure .eh_frame is aligned to 8 bytes on 64-bit arches, remove padding within one .eh_frame sectionC��"k Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-12>��- rebuilt[��!kOJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-11>��- one more fix for the same patchN�� k5Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-10>��- fix previous patch�"�� i�]Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9>�@- ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend and the other relocs have *r_offset == 0�2�� i�}Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8>��@- remove some unnecessary provides in ppc64 linker script which were causing e.g. empty .ctors/.dtors section creation�0�� i�yJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7>�@- some CFI updates/fixes - don't create dynamic relocations against symbols defined in PIE exported from its .dynsymh�� ikJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-6>��@- update gas to 20030604 - PT_GNU_STACK supportX��iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-5>�<@- buildrequire gettext (#91838)p��i{Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-4>ؙ@- fix shared libraries with >= 8192 .plt slots on ppc32B��i Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-3>�A- rebuilt�@��i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2>�@- rename ld --dynamic option to --pic-executable or --pie - fix ld --help output - document --pie/--pic-executable in ld.info and ld.1� ��i�YJakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1>Ԥ�- update to 2.14.90.0.4-1 - gas CFI updates (Richard Henderson) - dynamic executables (Ulrich Drepper)���i� Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-2>��- fix ELF visibility handling - tidy plt entries on IA-32, ppc and ppc64R��i?Jakub Jelinek <jakub@redhat.com> 2.14.90.0.2-1>��@- update to 2.14.90.0.2-1l��kqJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-8>��@- fix bfd_elf_hash on 64-bit arches (Andrew Haley)C��k Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-7>���- rebuilt���k�EJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-6>���- optimize DW_CFA_advance_loc4 in gas even if there is 'z' augmentation with size 0 in FDEK��k/Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-5>��@- fix SPARC build�.��k�sJakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4>�"@- fix ppc32 plt reference counting - don't include %{_prefix}/%{_lib}/debug in the non-debuginfo package (#87729) ! U �(� � + � � k � U � 7���^�A�7�$�o g�X � U n��NiwJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-1A 8@- update to 2.15.91.0.2 - BuildRequire flex (#117763)� ��Mi�1Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-7@�L@- use lib64 instead of lib directories on ia64 if %{_lib} is set to lib64 by rpm� ��Li�3Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-6@�@- fix a bug introduced in the ++/-- rejection patch from 2.15.90.0.3 (Alan Modra)y��Ki� Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-5@���- fix s390{,x} .{,b,p2}align handling - ppc/ppc64 testsuite fix�1��Ji�{Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4@�4@- -z relro ppc/ppc64/ia64 fixes - change x86-64 .plt symbol st_size handling to match ia32 - prettify objdump -d outputN��Ii7Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-3@��- several SPARC fixes]��HiUJakub Jelinek <jakub@redhat.com> 2.15.90.0.3-2@�m�- yet another fix for .tbss handlingP��Gi;Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-1@�- update to 2.15.90.0.3�6��Fm�Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2@dA- update to 20040326 CVS - fix ppc64 weak .opd symbol handling (Alan Modra, #119086) - fix .tbss handling bug introducedT��Em?Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-1@d@- update to 2.15.90.0.1.1�5��Di�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8@7H@- with -z now without --enable-new-dtags create DT_BIND_NOW dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit setL��Ci3Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-7@5��- fix -pie on ppc32���Bi�=Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-6@5��- clear .plt sh_entsize on sparc32 - put whole .got into relro area with -z now -z relro3��AK Elliot Lee <sopwith@redhat.com>@,�@- rebuiltK��@i1Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-4@�@- fix -pie on IA64Z��?iOJakub Jelinek <jakub@redhat.com> 2.14.90.0.8-3@ �- fix testcases on s390 and s390x�F��>i�%Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2@�A- fix testcases on AMD64 - fix .got's sh_entsize on IA32/AMD64 - set COMMONPAGESIZE on s390/s390x - set COMMONPAGESIZE on ppc32 (Alan Modra)P��=i;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-1@�@- update to 2.14.90.0.8X��<iKJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-4@�- fix -z relro on 64-bit arches\��;iSJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-3@�@- fix some bugs in -z relro supportf��:igJakub Jelinek <jakub@redhat.com> 2.14.90.0.7-2?���- -z relro support, reordering of RW sectionsP��9i;Jakub Jelinek <jakub@redhat.com> 2.14.90.0.7-1?���- update to 2.14.90.0.7� ��8i�WJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4?��- fix assembly parsing of foo=(.-bar)/4 (Alan Modra) - fix IA-64 assembly parsing of (p7) hint @pausen��7iwJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-3?yp@- don't abort on some linker warnings/errors on IA-64l��6isJakub Jelinek <jakub@redhat.com> 2.14.90.0.6-2?lAA- fix up merge2.s to use .p2align instead of .align�H��5i�)Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1?lA@- update to 2.14.90.0.6 - speed up string merging (Lars Knoll, Michael Matz, Alan Modra) - speed up IA-64 local symbol handling during linking��4i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-7?Xz�- avoid ld -s segfaults introduced in 2.14.90.0.5-5 (Dmitry V. Levin,� ��3i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-6?O@@- build old demangler into libiberty.a (#102268) - SPARC .cfi* supportW��2iIJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-5?/�@- fix orphan section placement�5��1i�Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4?&a�- fix ppc64 elfvsb linker tests - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols type and size (Alan Modra)_��0iYJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-3?&a�- fix 64-bit unclean code in ppc-opc.c^��/iWJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-2?%A- fix 64-bit unclean code in tc-ppc.cr��.iJakub Jelinek <jakub@redhat.com> 2.14.90.0.5-1?%@- update to 2.14.90.0.5 - fix ld -r on ppc64 (Alan Modra) V � X I � % i n �� �Z�� g�� V �:��ei� Jakub Jelinek <jakub@redhat.com> 2.16.90.0.3-1B�@- update to 2.16.90.0.3 - update to 20050615 CVS - ppc32 secure PLT support (Alan Modra) - further bfd/readelf robustificationq��dmyJakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-4B��@- further bfd robustification (CAN-2005-1704, #158680)���cm�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-3B���- further objdump and readelf robustification (CAN-2005-1704, #158680)v��bm�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-2B�h�- bfd and readelf robustification (CAN-2005-1704, #158680)���am�!Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2.2-1BIC@- update to 2.15.94.0.2.2 - speed up walk_wild_section (Robert O'Callahan)M��`i5Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-4B,B@- rebuilt with GCC 4�3��_i�Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-3B#�- fix buffer overflows in readelf (#149506) - move c++filt to binutils from gcc-c++, conflict with gcc-c++ < 4.0 (#86333)�\��^i�QJakub Jelinek <jakub@redhat.com> 2.15.94.0.2-1B L�- update to 2.15.94.0.2 - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296) - fix stripping of binaries/libraries that have empty sections right before .dynamic section (with the same starting address; #144038) - handle AS_NEEDED (...) in linker script INPUT/GROUP[��]kOJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-11A��- fix a longstanding -z relro bug�v��\k�Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-10A��@- avoid unnecessary gap with -z relro showing on i686 libc.so - ppc64 --emit-relocs fix (Alan Modra) - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS, as created by nasm; #142181) - don't try to make absptr LSDAs relative if they don't have relocations against them (Alan Modra, #141162)R��[q7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5.EL4A��- fix ar xo (#104344)l��ZisJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-5AvS@- fix --just-symbols on ppc64 (Alan Modra, #135498)���Yi�AJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-4Ao��- fix code detecting matching linkonce and single member comdat group sections (#133078)� ��Xi�QJakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3Aju�- revert Sep 09 change to make ppc L second argument e.g. for tlbie non-optional - fix stripping of prelinked binaries and libraries (#133734) - allow strings(1) on 32-bit arches to be used again with > 2GB files (#133555)���Wi�7Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-2Aa;@- update to 2.15.92.0.2 - change ld's ld.so.conf parser to match ldconfig's (#129340)�v��Vi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9AN�@- avoid almost 1MB (sparse) gaps in the middle of -z relro libraries on x86-64 (Andreas Schwab) - fix -z relro to make sure end of PT_GNU_RELRO segment is always COMMONPAGESIZE aligned�7��Ui�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8A#D�- fix linker segfaults on input objects with SHF_LINK_ORDER with incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)�=��Ti�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7A#D�- resolve all undefined ppc64 .* syms to the function bodies through .opd, not just those used in brach instructions (Alan Modra)^��SiWJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-6A!�A- fix ppc64 ld --dotsyms (Alan Modra)� ��Ri�-Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5A!�@- various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra) - fix --gc-sections - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for .gnu.linkonce.t.* function doesn't need unwind info�A��Qi�Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4A ��- kill ppc64 dot symbols (Alan Modra) - objdump -d support for objects without dot symbols - support for overlapping ppc64 .opd entriesh��PikJakub Jelinek <jakub@redhat.com> 2.15.91.0.2-3Ag@- fix a newly introduced linker crash on x86-64r��O]� Alan Cox <alan@redhat.com> 2.15.91.0.2-2A�- BuildRequire bison and macroise buildroot - from Steve Grubb � �ER � T � / � c � G v�����p�B��_�H � � �� i�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-4D�f�- link libopcodes*.so against libbfd*.so (#202327) - split *.a and header files into binutils-devel� ��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-3D�- on ppc and ppc64 increase default -z commonpagesize to 64K (#203001)� ��~o�-Alexandre Oliva <aoliva@redhat.com> 2.17.50.0.3-2D�@- do not infer x86 arch implicitly based on instruction in the input (#200330)P��}i;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.3-1D�{�- update to 2.17.50.0.3�|��|i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-8D��@- add support for new AMDFAM10 instructions (#198281, IT#97662) - add -march=/-mtune= gas support on x86/x86-64 - x86/x86-64 nop insn improvements - fix DT_GNU_HASH shift count value computation� ��{i�+Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-7D���- add DT_GNU_HASH support (--hash-style=gnu and --hash-style=both ld options)|��zi�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-4D���- fix i?86 TLS GD->IE transition in executables (#196157, BZ#2513)�)��yi�kJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-3D���- fix two places in ld that misbehaved with MALLOC_PERTURB_=N - fix .tls_common handling in relocatable linkingi��ximJakub Jelinek <jakub@redhat.com> 2.17.50.0.2-2D� �- fix --as-needed (Alan Modra, #193689, BZ#2721)�A��wi�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-1D~�- update to 2.17.50.0.2 - update from CVS to 20060601 - speed up the ELF linker by caching the result of kept section check (H.J. Lu)P��vi;Jakub Jelinek <jakub@redhat.com> 2.17.50.0.1-1D`�@- update to 2.17.50.0.1�"��ui�]Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-6D-�- fix ld error message formatting, so that collect2 parser can parse it again for g++ -frepo (#187142)m��tooAlexandre Oliva <aoliva@redhat.com> 2.16.91.0.6-4D�- fix relaxation of TLS GD to LE on PPC (#184590)��si�Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-3D/�- support DW_CFA_val_{offset,offset_sf,expression} in readelf/objdump�_��ri�WJakub Jelinek <jakub@redhat.com> 2.16.91.0.6-2D;@- add MNI support on i?86/x86_64 (#183080) - support S signal frame augmentation flag in .eh_frame, add .cfi_signal_frame support (#175951, PR other/26208, BZ#300)�L��qi�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-1C��@- update to 2.16.91.0.6 - fix ppc64 --gc-sections - disassembler fixes for x86_64 cr/debug regs - fix linker search order for DT_NEEDED libs�!��pi�[Jakub Jelinek <jakub@redhat.com> 2.16.91.0.5-1C��- update to 2.16.91.0.5 - don't error about .toc1 references to discarded sectiosn on ppc64 (#175944)r��oiJakub Jelinek <jakub@redhat.com> 2.16.91.0.3-2C� @- put .gnu.linkonce.d.rel.ro.* sections into relro region7��nS Jesse Keating <jkeating@redhat.com>C�q�- rebuilt� ��mi�1Jakub Jelinek <jakub@redhat.com> 2.16.91.0.3-1Ct��- update to 2.16.91.0.3 - add .weakref support (Alexandre Oliva, #115157, #165728)� ��li�-Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-4Cx@- install-info also configure.info - update standards.texi from gnulib (#165530)���ki�;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-3C�@- update to 20050816 CVS - better fix for ld-cdtest - fix symbol version script parsing�%��ji�cJakub Jelinek <jakub@redhat.com> 2.16.91.0.2-2B�@- don't complain about relocs to discarded sections in ppc32 .got2 sections (Alan Modra, PR target/17828)P��ii;Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-1B��- update to 2.16.91.0.2�n��hi�uJakub Jelinek <jakub@redhat.com> 2.16.91.0.1-3Bߎ@- fix buffer overflow in readelf ia64 unwind printing code - use vsnprintf rather than vsprintf in gas diagnostics (Tavis Ormandy) - fix ld-cdtest when CFLAGS contains -fexceptionsQ��gi=Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-2B�<�- update to 20050720 CVSb��fi_Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-1B�_@- update to 2.16.91.0.1 plus 20050708 CVS c �! � ! Y � ~ < ��,��)��s�v-�>�@ � c ^��iWJakub Jelinek <jakub@redhat.com> 2.18.50.0.6-2G�^@- backport .clmul -> .pclmul renamingw��i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.6-1G�@- update to 2.18.50.0.6 - Intel AES, CLMUL, AVX/FMA support�%��i�cJakub Jelinek <jakub@redhat.com> 2.18.50.0.4-2G��@- revert aranges optimization (Alan Modra, BZ#5303, BZ#5755) - fix ld-shared testcase for GCC 4.3 (H.J. Lu)P��i;Jakub Jelinek <jakub@redhat.com> 2.18.50.0.4-1G��- update to 2.18.50.0.4i���?Fedora Release Engineering <rel-eng@fedoraproject.org> 2.18.50.0.3-2G��- Autorebuild for GCC 4.3~��i�Jakub Jelinek <jakub@redhat.com> 2.18.50.0.3-1G_�@- update to 2.18.50.0.3 - fix build with recent makeinfo (#415271)�D��k� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.18-1F�<@- update to 2.17.50.0.18 - GPLv3+ - preserve .note.gnu.build-id in objcopy --only-keep-debug (#251935) - fix sparc64/alpha broken by --build-id patch (#252936) - update License tag - fix ld crash with --build-id and non-ELF output format (Alan Modra, BZ#4923)g��kgJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-7F�$@- fix ppc32 secure PLT detection (Alan Modra)� ��k�1Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-6F�;@- rebuilt to make sure even libbfd.so and libopcodes.so aren't broken by #249435x��k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-5F��- add .note.gnu.build-id into default linker script (#249435)�^��k�SJakub Jelinek <jakub@redhat.com> 2.17.50.0.17-4F��- don't kill the %{_gnu} part of target name on arm (Lennert Buytenhek, #243516) - create just one PT_NOTE segment header for all consecutive SHT_NOTE sectionsS��o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-3F� �- fix for ld --build-idS��o;Roland McGrath <roland@redhat.com> 2.17.50.0.17-2F� @- ld --build-id supportR��k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-1F�Q@- update to 2.17.50.0.17R�� k=Jakub Jelinek <jakub@redhat.com> 2.17.50.0.16-1Fn��- update to 2.17.50.0.16x�� k�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.12-4F �@- fix linking non-ELF input objects into ELF output (#235747)��� k�MJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-3E��- don't require matching ELF_OSABI for target vecs with ELFOSABI_NONE, only prefer specific osabi target vecs over the generic ones (H.J.Lu, #230964, BZ#3826) - build libbfd.so and libopcodes.so with -Bsymbolic-functionsp�� kyJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-2E��- ignore install-info errors from scriptlets (#223678)�U�� k�AJakub Jelinek <jakub@redhat.com> 2.17.50.0.12-1E�@- update to 2.17.50.0.12 - revert the misdesigned LD_SYMBOLIC{,_FUNCTIONS} env var support, only support -Bsymbolic/-Bsymbolic-functions/--dynamic-list*d��icJakub Jelinek <jakub@redhat.com> 2.17.50.0.9-1E�2@- update to 2.17.50.0.9 - fix tekhex reader]��iUJakub Jelinek <jakub@redhat.com> 2.17.50.0.8-2E�@- fix --as-needed on ppc64 (#219629)v��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.8-1Er�@- update to 2.17.50.0.8 - initialize frch_cfi_data (BZ#3607)�C��i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.7-1Ep@- update to 2.17.50.0.7 - .cfi_personality and .cfi_lsda directives, per subsection .cfi_* directives, better .eh_frame CIE merging~��i�Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-3ES@- fix popcnt instruction assembly and disassembly on amd64 (#214767)�y��i� Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-2E<��- update to 2.17.50.0.6 - fix for section relative linker script defined symbols in empty sections (#207598, BZ#3267) - fix handling of DW_CFA_set_loc in .eh_frame optimizations - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation handling with weak undefined symbols (Alan Modra, #211094)l��isJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-6E�A- fix multilib conflict in %{_prefix}/include/bfd.hk��iqJakub Jelinek <jakub@redhat.com> 2.17.50.0.3-5E�@- fix efi-app-ia64 magic number (#206002, BZ#3171) } l� � � '��R��v�J� } ���,�%Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.2-13I���- Rediff the symbolic-envvar-revert patch to comply with rpm patch --fuzz=0.� ��+i�SNick Clifton <nickc@redhat.com> 2.19.51.0.2-12I��- Rebase sources on 2.19.51.0.2 tarball. Remove linkonce-r-discard and gcc-expect-table patches.���*�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.50.0.1-11I��@- Fix .eh_frame_hdr build also for .gcc_except_table LSDA refs (BZ 461675).���)i�!Nick Clifton <nickc@redhat.com> 2.19.50.0.1-10Iy�@- Only require dejagnu if the testsuites are going to be run. (BZ 481169)� ��(g�WNick Clifton <nickc@redhat.com> 2.19.50.0.1-8I1.�- Add build-id patch to ensure that section contents are incorporated into a build id. (BZ 472152)� ��'c�_Nick Clifton <nickc@redhat.com> 2.19.50.0.1I&��- Rebase sources on 2.19.50.0.1 tarball. Update all patches, trimming those that are no longer needed.�6��&}�qJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-7I ��- Fix %{_prefix}/include/bfd.h on 32-bit hosts due the 64-bit BFD target support from 2.18.50.0.8-2 (BZ 468495).�e��%}�OJan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-6I ��- binutils-devel now requires zlib-devel (BZ 463101 comment 5). - Fix complains on .gnu.linkonce.r relocations to their discarded .gnu.linkonce.t counterparts.� ��$}� Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-5H�- Remove %makeinstall to comply with the spu-binutils review (BZ 452211).���#}�-Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-4H�- Fix *.so scripts for multilib linking (BZ 463101, suggested by Jakub Jelinek).�F��"}�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-3H�7@- Provide libbfd.so and libopcodes.so for automatic dependencies (BZ 463101). - Fix .eh_frame_hdr build on C++ files with discarded common groups (BZ 458950). - Provide --build and --host to fix `rpmbuild --target' biarch builds. - Include %{binutils_target}- filename prefix for binaries for cross builds. - Fix multilib conflict on %{_prefix}/include/bfd.h's BFD_HOST_64BIT_LONG_LONG.�l��!}�]Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-2H�N@- Package review, analysed by Jon Ciesla and Patrice Dumas (BZ 225615). - build back in the sourcedir without problems as gasp is no longer included. - Fix the install-info requirement. - Drop the needless gzipping of the info files. - Provide Obsoletes versions. - Use the %configure macro.�Y�� }�7Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-1H�6@- Update to 2.18.50.0.9. - Drop the ppc-only spu target pre-build stage (BZ 455242). - Drop parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - New .spec BuildRequires zlib-devel (/-static) for compressed sections. - Update .spec Buildroot to be more unique.�R�� }�)Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-2H���- Fix parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189). - Turn on 64-bit BFD support for i386, globally enable AC_SYS_LARGEFILE. - `--with debug' builds now with --disable-shared. - Removed a forgotten unused ld/eelf32_spu.c workaround from 2.18.50.0.8-1.�F�� }�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-1H��@- Update to 2.18.50.0.8. - Drop the .clmul -> .pclmul renaming backport. - Add %{binutils_target} macro to support building cross-binutils. (David Woodhouse) - Support `--without testsuite' to suppress the testsuite run. - Support `--with debug' to build without optimizations. - Refresh the patchset with fuzz 0 (for new rpmbuild). - Enable the spu target on ppc/ppc64 (BZ 455242).�@�� }�Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-4H}�- include the `dist' tag in the Release number - libbfd.a symbols visibility is now hidden (for #447426, suggested by Jakub)��� }�#Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-3H}�- rebuild libbfd.a with -fPIC for inclusion into shared libraries (#447426) T ^ � � 0 � / � Y � ` � K�s�M��h���F � T � ��Jm�'Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-12KV�@- Fix --no-copy-dt-needed so that it will not complain about weak references.`��ImWNick Clifton <nickc@redhat.com> - 2.20.51.0.2-11K+n�- Add missing part of PR 11088 patch.c��Hm]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-10K* @- Apply patch for PR 11088. (BZ 544149)b��Gk]Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-9K �@- Apply patch for PR 10856. (BZ 544358)x��Fq�Roland McGrath <roland@redhat.com> - 2.20.51.0.2-8K@- Build gold only for x86 flavors until others are tested.]��EqMRoland McGrath <roland@redhat.com> - 2.20.51.0.2-7K �- Add support for building gold.t��Di�Jakub Jelinek <jakub@redhat.com> 2.20.51.0.2-5J�A- Fix up --copy-dt-needed-entries default. (Nick Clifton)�+��Ci�oJakub Jelinek <jakub@redhat.com> 2.20.51.0.2-4J�@- Fix ld -s with IRELATIVE relocations. (BZ 533321, PR ld/10911) - Add AMD Orochi LWP support, fix FMA4 support.�0��Bg�{Nick CLifton <nickc@redhat.com> 2.20.51.0.2-3J�@- Rename --add-needed to --copy-dt-needed-entries and improve error message about unresolved symbols in DT_NEEDED DSOs.�.��A}�aJan Kratochvil <jan.kratochvil@redhat.com> 2.20.51.0.2-2J��- Fix rpm --excludedocs (BZ 515922). - Fix spurious scriplet errors by `exit 0'. (BZ 517979, Nick Clifton)�H��@g�+Nick Clifton <nickc@redhat.com> 2.20.51.0.2-1J�@- Rebase on 2.20 tarball. - Remove redundant moxie patch. - Remove redundant unique is global patch. - Remove redundant cxxfilt java doc patch.���?��Jan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.14-32J���- Remove spurious description of nonexistent --java switch for cxxfilt.���>m�1Jakub Jelinek <jakub@redhat.com> 2.19.51.0.14-31Jz�- Fix strip on objects with STB_GNU_UNIQUE symbols. (BZ 515700, PR binutils/10492)� ��=�)�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.14-30Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild� ��<k�)Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�A- Rebase sources on 2.19.51.0.14 tarball. Gain fixes for PRs 10429 and 10433.�"��;k�[Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28Jf�@- Rebase sources on 2.19.51.0.13 tarball. Remove redundant orphan section placement patch. (BZ 512937)���:k�3Nick Clifton <nickc@redhat.com> 2.19.51.0.11-27J\sB- Add patch to allow moxie target to build, and hence --enable-targets=all to work.~��9k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-26J\sA- Import orphan section placement patch from mainline. (BZ 510384)x��8k�Nick Clifton <nickc@redhat.com> 2.19.51.0.11-25J\s@- Fix build-id patch to avoid memory corruption. (BZ 501582)y��7�sJan Kratochvil <jan.kratochvil@redhat.com> 2.19.51.0.11-24JX~�- Provide uuencode output of the testsuite results.g��6kgNick Clifton <nickc@redhat.com> 2.19.51.0.11-23JI�@- Rebase sources on the 2.19.51.0.11 tarball.g��5kgNick Clifton <nickc@redhat.com> 2.19.51.0.10-22J?r@- Rebase sources on the 2.19.51.0.10 tarball.���4i�'Nick Clifton <nickc@redhat.com> 2.19.51.0.2-21J0�- Do not attempt to set execute permission on non-regular files. (BZ 503426)q��3k{Jakub Jelinek <jakub@redhat.com> 2.19.51.0.2-20J.N�- Fix .cfi_* skip over >= 64KB of code. (PR gas/10255)i��2imNick Clifton <nickc@redhat.com> 2.19.51.0.2-19J +@- Import fix for binutils PR #9938. (BZ 500295)��1i�Nick Clifton <nickc@redhat.com> 2.19.51.0.2-18I��@- Update IBM Power 7 support patch to fix tlbilx opcode. (BZ 494718)y��0i� Nick Clifton <nickc@redhat.com> 2.19.51.0.2-17I���- Add glibc-static to BuildRequires when running the testsuite._��/iYNick Clifton <nickc@redhat.com> 2.19.51.0.2-16I���- Add IBM Power7 support. (BZ 487887)Z��.iONick Clifton <nickc@redhat.com> 2.19.51.0.2-15I��@- Add IFUNC support. (BZ 465302)� ��-�'�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.19.51.0.2-14I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild H �� s 4 � F ��W�[��p�w�x�[�� � H b��gk]Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-2M�@- Import fix for PR ld/12851 (BZ 711268)g��fkgNick Clifton <nickc@redhat.com> - 2.21.52.0.1-1M�- Rebase on 2.21.52.0.1 tarball. (BZ 712025)g��ekgNick Clifton <nickc@redhat.com> - 2.21.51.0.9-1M�c@- Rebase on 2.21.51.0.9 tarball. (BZ 703105)W��dw;Peter Robinson <pbrobinson@gmail.com> - 2.21.51.0.8-3M���- Add ARM to BFD checksx��ck�Nick Clifton <nickc@redhat.com> - 2.21.51.0.8-2M��A- Delete plugins patch - enable plugins via configure option.Z��bkMNick Clifton <nickc@redhat.com> - 2.21.51.0.8-1M��@- Rebase on 2.21.51.0.8 tarball.Z��akMNick Clifton <nickc@redhat.com> - 2.21.51.0.7-1M���- Rebase on 2.21.51.0.7 tarball.]��`kSNick Clifton <nickc@redhat.com> - 2.21.51.0.6-2Mv@- Enable gold plugins. (BZ 682852)Z��_kMNick Clifton <nickc@redhat.com> - 2.21.51.0.6-1MS�@- Rebase on 2.21.51.0.6 tarball.� ��^�%�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.21.51.0.5-4MO�- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��]meJakub Jelinek <jakub@redhat.com> - 2.21.51.0.5-3MB��- Readd --build-id fix patch. (PR ld/12451)� ��\e�/Dan Horák <dan[at]danny.cz> - 2.21.51.0.5-2M%��- fix build on non-gold arches like s390(x) where both ld and ld.bfd is installed�$��[k�_Nick Clifton <nickc@redhat.com> - 2.21.51.0.5-1M$]@- Rebase on 2.21.51.0.5 tarball. - Delete redundant patches. - Fix gold+ld configure command line option.d��ZgeDan Horák <dan[at]danny.cz> - 2.20.51.0.12-2L��- "no" is not valid option for --enable-goldi��YmiNick Clifton <nickc@redhat.com> - 2.20.51.0.12-1L�e�- Rebase on 2.20.51.0.12 tarball. (BZ 582160)i��XmiNick Clifton <nickc@redhat.com> - 2.20.51.0.11-1L� �- Rebase on 2.20.51.0.11 tarball. (BZ 631771)���Wm�#Nick Clifton <nickc@redhat.com> - 2.20.51.0.10-3LnnA- Allow ^ and ! characters in linker script wildcard patterns. (BZ 621742)l��VmoNick Clifton <nickc@redhat.com> - 2.20.51.0.10-2Lnn@- Fix seg fault in sec_merge_emit(). (BZ 623687)� ��Um�ONick Clifton <nickc@redhat.com> - 2.20.51.0.10-1La?@- Rebase on 2.20.51.0.10 tarball. - Import GOLD sources from binutils mainline as of 10 Aug 2010.� ��Tk�UNick Clifton <nickc@redhat.com> - 2.20.51.0.7-5L+1�- Rename the binutils-static package to binutils-devel in line with the Fedora packaging guidelines.�$��Sk�_Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-4L�@- Allow GOLD linker to parse "-l<name>" directives inside INPUT statements in linker scripts. (BZ 600553)a��Rk[Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-3K� @- Allow unique symbols in archive maps.���Qk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-2K͗@- Merge binutils-devel package into binutils-static package. (BZ 576300)�:��Pk� Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-1K��@- Rebase on 2.20.51.0.7 tarball. - Delete redundant patches: binutils-2.20.51.0.2-add-needed.patch, binutils-2.20.51.0.2-do-not-set-ifunc.patch, binutils-2.20.51.0.2-enable-gold.patch, binutils-2.20.51.0.2-gas-expr.patch, binutils-2.20.51.0.2-ifunc-ld-s.patch, binutils-2.20.51.0.2-lwp.patch, binutils-2.20.51.0.2-ppc-hidden-plt-relocs.patch, binutils-2.20.51.0.2-x86-hash-table.patch, - Do not allow unique symbols to be bound locally. (PR ld/11434) - Add support for DWARF4 debug information.���Om�?Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-17K���- Do not set ELFOSABI_LINUX on binaries which just link to IFUNC using DSOs. (BZ 568941)w��Nm�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-16K���- Copy the OSABI field in ELF headers, if set. (BZ 568921)y��Mm�Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-15KuB�- Create separate static and devel sub-packages. (BZ 556040)���Lm� Nick Clifton <nickc@redhat.com> - 2.20.51.0.2-14Kh�- Fix seg-fault when linking mixed x86 and x86_64 binaries. (BZ 487472)n��KmsNick Clifton <nickc@redhat.com> - 2.20.51.0.2-13KY�@- Add a requirement for the coreutils. (BZ 557006) N i�k � A � Q � � � ]�x�?�H�u��B�I � N ���k�=Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-5O���- Catch attempts to create a broken symbol index with archives > 4Gb in size. (#835957)_��kWNick Clifton <nickc@redhat.com> - 2.22.52.0.4-4O�- Import fix for ld/14189. (#829311)���k�GNick Clifton <nickc@redhat.com> - 2.22.52.0.4-3O�- Fix handling of archives > 4Gb in size by importing patch for PR binutils/14302. (#835957)X��mGJakub Jelinek <jakub@redhat.com> - 2.22.52.0.4-2O�i�- Add minimal dwz -m support.e��kcNick Clifton <nickc@redhat.com> - 2.22.52.0.4-1O�F@- Rebase on 2.22.52.0.4 release. (#829027)e��kcNick Clifton <nickc@redhat.com> - 2.22.52.0.3-1O� �- Rebase on 2.22.52.0.3 release. (#819823)��� k�#Nick Clifton <nickc@redhat.com> - 2.22.52.0.2-1O�~�- Rebase on 2.22.52.0.2 release. (#816514) - Retire binutils-2.22.52.0.1-weakdef.patch, binutils-2.22.52.0.1-ld-13621.patch, binutils-rh797752.patch, binutils-2.22.52.0.1-x86_64-hidden-ifunc.patch, binutils-2.22.52.0.1-tsx.patch and binutils-2.22.52.0.1-hidden-ifunc.patch. - Update binutils-2.22.52.0.1-reloc-on-by-default.patch.a��mYNick Clifton <nickc@redhat.com> - 2.22.52.0.1-12O��@- Include demangle.h in the devel rpm.m��~mqNick Clifton <nickc@redhat.com> - 2.22.52.0.1-11Oz�@- Enable -zrelro by default for RHEL 7+. (#807831)l��}omJakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-10Oc+@- Fix up handling of hidden ifunc relocs on i?86_��|_cJeff Law <law@redhat.com> - 2.22.52.0.1-9O`�@- Fix c++filt docs (2nd instance) (#797752)���{m�!Jakub Jelinek <jakub@redhat.com> - 2.22.52.0.1-8OWM�- Fix up handling of hidden ifunc relocs on x86_64 - Add Intel TSX supporth��zkiNick Clifton <nickc@redhat.com> - 2.22.52.0.1-7OU�@- Enable -zrelro by default. (#621983 #807831)P��y_EJeff Law <law@redhat.com> - 2.22.52.0.1-6OKp@- Fix c++filt docs (#797752)���xi� Mark Wielaard <mjw@redhat.com> - 2.22.52.0.1-5O;�@- Add upstream ld/13621 'dangling global hidden symbol in symtab' patch.Z��wwAAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-4O2c�- Actually apply the patchn��vwiAdam Williamson <awilliam@redhat.com> - 2.22.52.0.1-3O2c�- Add upstream weakdef.patch to fix RH #788107o��ukwNick Clifton <nickc@redhat.com> - 2.22.52.0.1-2O))A- Drat - forgot to upload the new tarball. Now done.�1��tk�yNick Clifton <nickc@redhat.com> - 2.22.52.0.1-1O))@- Rebase on 2.22.52 release. - Remove build-id.patch and gold-casts.patch as they are included in the 2.22.52 sources.~��s]�!Nick Clifton <nickc@redhat.com> - 2.22-4O �- Fix bug in GOLD sources parsing signed integers in command line options.i��r]yNick Clifton <nickc@redhat.com> - 2.22-3O �- Add casts for building gold with 4.7 version of gcc.���q��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.22-2O�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildL��p]?Nick Clifton <nickc@redhat.com> - 2.22-1Nˎ�- Rebase on 2.22 release.a��ouQRicky Zhou <ricky@fedoraproject.org> - 2.21.53.0.2-2N��@- Rebuild libopcodes.a with -fPIC.���nk�Nick Clifton <nickc@redhat.com> - 2.21.53.0.2-1NA!@- Rebase on 2.21.53.0.2 tarball. Delete unneeded patches. (BZ 728677)e��mkcNick Clifton <nickc@redhat.com> - 2.21.53.0.1-3N7�- Update libiberty demangling. (BZ 727453)� ��lk�SNick Clifton <nickc@redhat.com> - 2.21.53.0.1-2N/��- Import Jakub Jelinek's patch to add support for displaying the contents of .debug_macro sections.���kk�Nick Clifton <nickc@redhat.com> - 2.21.53.0.1-1N%q�- Rebase on 2.21.53.0.1 tarball. Delete unneeded patches. (BZ 712668)W��jkGNick Clifton <nickc@redhat.com> - 2.21.52.0.1-5N|A- Import fix for PR ld/12921.� ��ik�SNick Clifton <nickc@redhat.com> - 2.21.52.0.1-4N|@- Run "alternatives --auto" to restore ld symbolic link if it was manually configured. (BZ 661247)���hk�;Nick Clifton <nickc@redhat.com> - 2.21.52.0.1-3M��@- Fix seg-fault attempting to find a function name without a symbol table. (BZ 713471) w ��j W � Y � < � u � _��$�8�$�R�^�_�_�& w �*��$a�uJeff Law <law@redhat.com> - 2.23.52.0.1-10Q�@- Add libstdc++-static as a build requirement when running the testsuite. - Add remaining power8 support (#731883)���#k�?Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-9Q��- Add support for the alternative debuging files generated by the DWZ program. (#965255)���"k�MNick Clifton <nickc@redhat.com> - 2.23.52.0.1-8Qn��- Import patch for FSF mainline PR 15371 to fix ifunc references in shared libraries. (#927818)���!k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-7Qd�- Fix library search paths for 64-bit aarch64 linux targets. (#950098)u�� k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-6Q@j@- Add explicit requirement of /usr/bin/pod2man. (#920545)� �� k�-Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-5Q9�- Reverts patch for PR15149 - prevents report weak DT_NEEDED symbols. (#918003)k�� koNick Clifton <nickc@redhat.com> - 2.23.52.0.1-4Q7/�- Enable building of GOLD for the ARM. (#908966)j�� kmNick Clifton <nickc@redhat.com> - 2.23.52.0.1-3Q4��- Fix errors reported by version 5.0 of texinfo.��� k�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-2Q0�@- Fix the creation of index tables in 64-bit thin archives. (#915411)e��kcNick Clifton <nickc@redhat.com> - 2.23.52.0.1-1Q/F�- Rebase on 2.23.51.0.1 release. (#916516)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.9-2Q�- Enable 64-bit BFD for aarch64. (#908904)���k�KNick Clifton <nickc@redhat.com> - 2.23.51.0.9-1Q��- Rebase on 2.23.51.0.9 release. (#907089) - Retire binutils-2.23.51.0.8-arm-whitespace.patch.q��k{Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-4P�-�- Allow more whitespace in ARM instructions. (#892261)� ��u� Patsy Franklin <pfrankli@redhat.com> - 2.23.51.0.8-3P�D�- Add bc to BuildRequires when running the testsuite. (#895321)c��k_Nick Clifton <nickc@redhat.com> - 2.23.51.0.8-2P�!A- Add runtime link with libdl. (#889134)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.8-1P�!@- Rebase on 2.23.51.0.8 release. (#890382)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.7-1P�O@- Rebase on 2.23.51.0.7 release. (#889432)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.6-1P��@- Rebase on 2.23.51.0.6 release. (#880508)���k�ANick Clifton <nickc@redhat.com> - 2.23.51.0.5-1P�6@- Rebase on 2.23.51.0.5 release. (#876141) - Retire binutils-2.23.51.0.3-arm-ldralt.patchx��k�Nick Clifton <nickc@redhat.com> - 2.23.51.0.3-3P���- Rename ARM LDRALT instruction to LDALT. (#869025) PR/14575Z��oIJon Ciesla <limburgher@gmail.com> - 2.23.51.0.3-2P{��- Provides: bundled(libiberty)e��kcNick Clifton <nickc@redhat.com> - 2.23.51.0.3-1Pj�@- Rebase on 2.23.51.0.3 release. (#858560)�1��k�yNick Clifton <nickc@redhat.com> - 2.23.51.0.2-1PO'�- Rebase on 2.23.51.0.2 release. (#856119) - Retire binutils-2.23.51.0.1-gold-keep.patch and binutils-rh805974.patch.c�� [oJeff Law <law@redhat.com> 2.23.51.0.1-4PE�@- Correctly handle PLTOFF relocs for s390 IFUNCs.{�� k� Karsten Hopp <karsten@redhat.com> 2.23.51.0.1-3P*=�- apply F17 commit cd2fda5 to honour {powerpc64} macro (#834651){�� k� Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-2P*=�- Make GOLD honour KEEP directives in linker scripts (#8333355)��� k�3Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-1P"T�- Rebase on 2.23.51.0.1 release. (#846433) - Retire binutils-2.22.52.0.4-dwz.patch, binutils-2.22.52.0.4-ar-4Gb.patch, binutils-2.22.52.0.4-arm-plt-refcount.patch, binutils-2.22.52.0.4-s390-64bit-archive.patch.��� k�'Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-8Pk�- Make the binutils-devel package depend upon the binutils package. (#845082)���k�%Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-7Pk�- Disable checks that config.h is included before system headers. (#845084)y��k� Nick Clifton <nickc@redhat.com> - 2.22.52.0.4-6PS�- Use 64bit indicies in archives for s390 binaries. (#835957) � [�R � 9 � � 7 � � � b �.�5�co�2� �' � ��@a� Jeff Law <law@redhat.com> - 2.23.52.0.1-30T���- Fix syntax for multiple --enable-targets configure option. (#1133147)m��?a}Jeff Law <law@redhat.com> - 2.23.52.0.1-29T�q@- Add support for crc instructions on aarch64 (#1179810)���>a�%Jeff Law <law@redhat.com> - 2.23.52.0.1-28T�|�- Bring back spu target for ppc64le which was accidentally lost (#1133147)}��=s� Richard Henderson <rth@redhat.com> - 2.23.52.0.1-27T� �- (Re-)Set ELF_COMMONPAGESIZE to 64k for ppc64le. (#1174826)� ��<w�%Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-26T��- Enable Intel AVX-512VL, AVX-512BW, AVX-512DQ and SGX support. (#1140375)�+��;e�sJeff Law <law@redhat.com> - 2.23.52.0.1-25.9S��@Revert this change (handled elsewhere): - Additional patch from Alan to fix problems with ld --defsym. (#1132732)���:e�-Jeff Law <law@redhat.com> - 2.23.52.0.1-23.9S�%@- Include powerpc-linux as a BFD target when building for ppc64le. (#1133147).�o��9{�ePatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-22.9S�0�- Reduce the size of aarch64 .debug_line; fix cfi encoding of fp registers; add register names to dumping of aarch64 cfi data. Patch provided by rth. Resolves: #1132641�+��8{�]Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-21.9S�0�- This fixes a problem seen on powerpc64le ELFv2 when creating a function symbol alias with ld --defsym. st_other needs to be copied from the source symbol to the alias in order to set up the local entry offset for the alias.� ��7{�APatsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-20.9S��- Correct handling of strong followed by weak def merging of st_other Resolves: #1130479e��6eiJeff Law <law@redhat.com> - 2.23.52.0.1-19.9S�S@- Add missing PPC opcodes Resolves: #1090618� ��5e�3Jeff Law <law@redhat.com> - 2.23.52.0.1-18.9S�@- Do not overwrite valid SONAME with empty string. (#1128279) Resolves: #1128280r��4usAldy Hernandez <aldyh@redhat.com> - 2.23.52.0.1-17.9S�u�- Initial support for ppc64le. Fix for bz#1125478X��3w=Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.9S� @- Backport fix for movi.^��2wIRichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.8S�h@- Backport support for IFUNCs.���1s�AMark Salter <msalter@redhat.com> - 2.23.52.0.1-16.7S�9@- Backport support for full range of CRn in AArch64 system registers. Fix for bz#1109497� ��0q�Kyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.6Su��- AArch64: Backport two patches from upstream fixing GOT handling.V��/s=Brendan Conoboy <blc@redhat.com> - 2.23.52.0.1-16.5St�@- Rebuild for BZ#1098169�n��.q�mKyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.4Sl�@- AArch64: Backport two fixes from upstream and add a draft patch to set DF_STATIC_TLS when emitting IE relocs. Also increase ELF_COMMONPAGESIZE to 64K to match the kernel.a��-wORichard Henderson <rth@redhat.com> - 2.23.52.0.1-16.3SNp�- Backport tls-relax-gdesc-ie fixS��,w3Richard Henderson <rth@redhat.com> - 2.23.52.0.1-16.2S!��- Fix for rh1075827P��+q3Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-16.1S��- Fix for rh1066712S��*k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-16R�U�- Mass rebuild 2014-01-24k��)ayJeff Law <law@redhat.com> - 2.23.52.0.1-15R��@- Set _performance_build to get -O3 builds (#1051060).�%��(a�kJeff Law <law@redhat.com> - 2.23.52.0.1-14Rʚ�- Fix two may-be-uninitialized issues exposed by changes in compiler flags used to build binutils (#1048848).S��'k?Daniel Mach <dmach@redhat.com> - 2.23.52.0.1-13R�k�- Mass rebuild 2013-12-27�-��&o�mJakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12R 7�- Add Intel AVX3, MPX and SHA support. - Add support for x86-64 -mcmodel=large -fpic TLS transitions. (#994244)� ��%a�aJeff Law <law@redhat.com> - 2.23.52.0.1-11Qֵ@- Add support for TDB notes section (#805115) - Fix length operands for cdzt, cxzt czdt and czxt (#805115) � ��( � � n / w � ?Y�| ���m� o��ViyNick Clifton <nickc@redhat.com> 2.23.52.0.1-56V���- Remove __PPC__ checks from BFD library. (#1261016)� ��Ui�-Nick Clifton <nickc@redhat.com> 2.23.52.0.1-55V �@- Add missing delta to patch that fixes parsing corrupted archives. (#1162666)���Ti�;Nick Clifton <nickc@redhat.com> 2.23.52.0.1-54U��@- Import patch for PR 18270: Create AArch64 GOT entries for local symbols. (#1238783)���Sc�%Jeff Law <law@redhat.com> - 2.23.52.0.1-51U�n�- Fix incorrectly generated binaries and DSOs on PPC platforms. (#1247126)z��Rm� Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-50U�3E- Fix memory corruption parsing corrupt archives. (#1162666)p��QmwNick Clifton <nickc@redhat.com> - 2.23.52.0.1-49U�3D- Fix directory traversal vulnerability. (#1162655)l��PmoNick Clifton <nickc@redhat.com> - 2.23.52.0.1-48U�3C- Fix stack overflow in SREC parser. (#1162621)���Om�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-47U�3B- Fix stack overflow whilst parsing a corrupt iHex file. (#1162607)���Nm�ENick Clifton <nickc@redhat.com> - 2.23.52.0.1-46U�3A- Fix out of bounds memory accesses when parsing corrupt PE binaries. (#1162594, #1162570)�5��Mm�Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45U�3@- Change strings program to default to -a. Fix problems parsing files containg corrupt ELF group sections. (#1157276)�a��La�cJeff Law <law@redhat.com> - 2.23.52.0.1-44U�J@- Avoid reading beyond function boundary when disassembling. (#1060282) - For binary ouput, we don't have an ELF bfd output so can't access elf_elfheader. (#1226864)u��Ka� Jeff Law <law@redhat.com> - 2.23.52.0.1-43Ug@- Do not discard stap probe note sections on aarch64 (#1225091)�:��Ja�Jeff Law <law@redhat.com> - 2.23.52.0.1-42Ud`@- Clamp maxpagesize at 1 (rather than 0) to avoid segfaults in the linker when passed a bogus max-page-size argument. (#1203449)�3��Io�yMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-41U]�- Fixup bfd elf_link_add_object_symbols for ppc64 to prevent subsequent uninitialized accesses elsewhere. (#1172766)�S��Ha�GJeff Law <law@redhat.com> - 2.23.52.0.1-40UKS�- Minor testsuite adjustments for PPC changes in -38/-39. (#1183838) Fix md_assemble for PPC to handle arithmetic involving the TOC better. (#1183838)c��Go[Martin Sebor <msebor@redhat.com> - 2.23.52.0.1-39UJA- Fix ppc64: segv in libbfd (#1172766).o��FosMartin Sebor <msebor@redhat.com> - 2.23.52.0.1-38UJ@- Unconditionally apply ppc64le patches (#1183838).�)��Ea�sJeff Law <law@redhat.com> - 2.23.52.0.1-37UG_@- Andreas's backport of z13 and dependent fixes for s390, including tesetcase fix from Apr 27, 2015.' (#1182153)���Da�IJeff Law <law@redhat.com> - 2.23.52.0.1-35U#�- Fixup testsuite for AArch64 (#1182111) - Add support for @localentry for LE PPC64 (#1194164)b��CagJeff Law <law@redhat.com> - 2.23.52.0.1-34U�@- Do not install windmc(1) man page (#850832)� ��Ba�3Jeff Law <law@redhat.com> - 2.23.52.0.1-33UF@- Do not replace R_390_TLS_LE{32,64} with R_390_TLS_TPOFF for PIE (#872148) - Enable relro by default for arm and aarch64 (#1203449) - Backport 3 RELRO improvements for ppc64/ppc64le from upstream (#1175624)`��AacJeff Law <law@redhat.com> - 2.23.52.0.1-31U .@- Backport upstream RELRO fixes. (#1200138) T $ � : � P���:���|�� � T ���ki�#Nick Clifton <nickc@redhat.com> 2.25.1-26-baseX|��- Speed up displaying disassembly when mixed with source code. (#1311352)� ��ji�YNick Clifton <nickc@redhat.com> 2.25.1-25-baseX|��- Fix GOLD so that it will not warn about references to hidden symbols in shared objects. (#1326710)e��iieNick Clifton <nickc@redhat.com> 2.25.1-24-baseXo��- Fix thinko in previous patch. (#1406430)� ��hi�/Nick Clifton <nickc@redhat.com> 2.25.1-23-baseXo��- Add code to detect attempts to link PIE and non-PIE S390 binaries. (#1406430)� ��gi�Nick Clifton <nickc@redhat.com> 2.25.1-22-baseW�tA- Fix date format bug in changelog which was preventing package build.���fi� Nick Clifton <nickc@redhat.com> 2.25.1-21-baseW�t@- Add support for Z13 extensions to IBMs s390 architecture. (#1364516)x��ei� Nick Clifton <nickc@redhat.com> 2.25.1-20-baseWm �- Import new PPC ISA 3.0 patch from FSF binutils. (#1341730)���di�=Nick Clifton <nickc@redhat.com> 2.25.1-19-baseW^�A- Add support for the .arch_extension pseudo-op to the AArch64 port of GAS. (#1276755)u��ci�Nick Clifton <nickc@redhat.com> 2.25.1-18-baseW^�@- Update patch to fix AArch64 stub generation. (#1243559)� ��bi�YNick Clifton <nickc@redhat.com> 2.25.1-17-baseWP �- Close memory leak in "ar" archiver program. (#1162655) - Retire the copy-osabi patch. (#1252066)}��ai�Nick Clifton <nickc@redhat.com> 2.25.1-16-baseWP �- Version bump to allow adding 1300543 to the errata. (#1300543)}��`i�Nick Clifton <nickc@redhat.com> 2.25.1-15-baseWN�@- Extend Power9 patch to add new ISA 3.0 instructions. (#1341730)�Y��_i�KNick Clifton <nickc@redhat.com> 2.25.1-14-baseWE��- Extend Release string to include ".base" thus ensuring that it will not collide with a DTS release which might otherwise have the same name. (#1337617)���^_�MNick Clifton <nickc@redhat.com> 2.25.1-13WB�- Add support for Zeppelin x86 extensions. - Add support for the AMD MWAITX extension. - Add support for the PowerPC Power9 architecture. - Remove spurious binutils document references. (#1335313) (#1335684) (#1333305)���]_�SNick Clifton <nickc@redhat.com> 2.25.1-10W4�- Allow the BFD library to locate debug info files below the /usr/lib/debug directory. (#1311352)v��\]�Nick Clifton <nickc@redhat.com> 2.25.1-9W ��- Housekeeping: Delete unused patches. Renumber existing patches.l��[]Nick Clifton <nickc@redhat.com> 2.25.1-8VՄ@- Fix PowerPC gas and ld testsuite failures. (#1312876)f��Z]sNick Clifton <nickc@redhat.com> 2.25.1-7V�I�- Extend fix for AArch64 call veneers. (#1243559)|��Y]� Nick Clifton <nickc@redhat.com> 2.25.1-6V�`�- Add support for Intel Memory Protection Key instructions. (#1304451)�v��X]�Nick Clifton <nickc@redhat.com> 2.25.1-4V��@- Improve warning message for overflowing AArch64 relocs. - Import patch to fix PR18668. - Ignore warning messages about duplicate FDE entries (#1300543) (#1300603) (#1285614) (#1243559)�\��W]�]Nick Clifton <nickc@redhat.com> 2.25.1-3V�T@- Experimental rebase on FSF 2.25.1 sources. (#1341730) - Retire: patch11, patch12, patch13, patch14, patch15, patch16, patch17, patch18, patch19, patch20, patch21, patch22, patch23, patch24, patch25, patch26, patch27, patch28, patch29, patch30, patch32, patch100, patch101, patch102, patch110, patch111, patch112, patch113, patch114, patch115, patch116, patch117, patch118, patch119, patch120, patch121, patch201, patch202, patch203, patch204, patch205, patch206, patch207, patch208, patch209, patch210, patch211, patch212, patch300, patch301, patch302, patch303, patch304, patch305, patch306, patch307, patch308, patch309, patch400, patch401, patch402, patch403, patch404, patch405, patch406, patch407, patch501 - Add patch to suppress checking of PPC64 TLBIE instruction. [TEMPORARY] - Add fix for FSF PR 18879 - Add fix for s390x linker testsuite failure. (#1276755) (#1260158) (#1300734) (#1288068) g {�` � M h�P�'�3�]�,��^ � g ���g� Nick Clifton <nickc@redhat.com> 2.27-27.baseZWQ�- Do enable relro by default for the PowerPC64 architecture. (#1523946)l�� guNick Clifton <nickc@redhat.com> 2.27-26.baseZN@- Fix thinko in post-uninstall section. (#1520899)���g�=Nick Clifton <nickc@redhat.com> 2.27-25.baseZKtA- Remove man and info files not needed when building without documentation. (#1530339)���~g�INick Clifton <nickc@redhat.com> 2.27-24.baseZKt@- Check for the existance of standards.info.gz before attempting to uninstall it. (#1520899)���}g�INick Clifton <nickc@redhat.com> 2.27-23.baseZ8�@- Do not complain if the standards.info.gz file does not exist when uninstalling. (#1520899)���|g�'Nick Clifton <nickc@redhat.com> 2.27-22.baseZ.s@- Do not enable relro by default for the PowerPC64 architecture. (#1523946)�!��{e�_Nick Clifton <nickc@redhat.com> 2.27-21.baseZ }�- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections. (#1513014)�8��ze� Nick Clifton <nickc@redhat.com> 2.27-20.baseY��- Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs. (#1508954)�*��ye�qNick Clifton <nickc@redhat.com> 2.27-19.baseY�|�- Suppress the generation of R_X86_64_GOTPCRELX, R_X86_64_REX_GETPCRELX and R_386_GOT32X relocations. (#1506004)f��xekNick Clifton <nickc@redhat.com> 2.27-18.baseYܶ@- Update AArch64 copy reloc patch. (#1430743)x��we� Nick Clifton <nickc@redhat.com> 2.27-17.baseY��@- Add LNIA, SCV and RFSCV instructions from Power9. (#1356856)t��ve�Nick Clifton <nickc@redhat.com> 2.27-16.baseY��@- Fix seg-fault when stripping s390x binaries. (#14888890)� ��ue�/Nick Clifton <nickc@redhat.com> 2.27-15.baseY���- Add support for creating a PT_S390_PGSTE segment in s390 binaries. (#1485398)���te�INick Clifton <nickc@redhat.com> 2.27-14.baseY���- Add standards.info file to documentation distributed with the binutils package. (#1467390)���se�ANick Clifton <nickc@redhat.com> 2.27-12.baseY��A- Generate an error when attempting to link non-PIC s390 objects in PIE mode. (#1406430)}��re�Nick Clifton <nickc@redhat.com> 2.27-11.baseY��@- Fix generation of dynamic COPY relocs for the AArch64. (#1452170)�`��qe�]Nick Clifton <nickc@redhat.com> 2.27-10.baseY��@- Rebase to binutils 2.27 + Retire: binutils-2.20.51.0.2-ia64-lib64.patch + Retire: binutils-2.20.51.0.10-copy-osabi.patch + Retire: binutils-rh1260158.patch + Retire: binutils-rh1300734.patch + Retire: binutils-2.25.1-aarch64-overflow-warnings.patch + Retire: binutils-2.25-aarch64-pr18668.patch + Retire: binutils-2.25.1-aarch64-pagesize.patch + Retire: binutils-rh1304451.patch + Retire: binutils-2.25.1-x86-Zepplin.patch + Retire: binutils-2.25.1-power9.patch + Retire: binutils-2.25.1-x86-mwaitx.patch + Retire: binutils-rh1162655.patch + Retire: binutils-2.25.1-aarch64-arch-extension.patch + Retire: binutils-2.25.1-s390-z13.patch + Retire: binutils-2.25.1-gold-resolving-to-hidden-symbols.patch - Sync with Pegas 1.1 binutils. - Import patch to add support for DWARF5 tags. (#1472955) - Import patch to fix converting addresses into function names. (#1465318)(#1452170) - Add support for ARMv8.2 ISA extensions. (#1385959)� ��pi�3Nick Clifton <nickc@redhat.com> 2.25.1-33.baseYw2�- Add support for new tags defined by version 5 of the DWARF standard. (#1472955)}��oi�Nick Clifton <nickc@redhat.com> 2.25.1-32.baseYw2�- Remove the minmax part of the objdump speedup patch. (#1465318)y��ni� Nick Clifton <nickc@redhat.com> 2.25.1-31.baseY�@- Fix generation of PLT entries for s390 binaries. (#1440168)���mi�KNick Clifton <nickc@redhat.com> 2.25.1-28-baseY �- Disable fix for 1406430. It breaks building real s390 executables. (#1447209) (#1406430)� ��li�Nick Clifton <nickc@redhat.com> 2.25.1-27-baseY�@- Fix infnite loop in linker when counting PowerPC stubs. (#1406498) : � � c � p p � ]�g�h�.<�M � : {��g� Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)���g�9 Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561)�a����'Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c���o�Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��g�uNick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� ��g�WNick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)���g�?Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h��gmNick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��� g�7Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�� g�Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�� g�Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��� g�9Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�� g�Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)�{��g�Nick Clifton <nickc@redhat.com> 2.27-34.base[�@- Fix seg-fault parsing corrupt AOUT format files. (#1579799) - Fix seg-fault parsing corrupt DWARF2 debug information. (#1579802) - Fix seg-fault parsing corrupt ELF format files. (#1579801)���g�9Nick Clifton <nickc@redhat.com> 2.27-33.baseZ�n�- Fix seg-fault parsing ELF files. (#1578979) - Fix seg-fault parsing DWARF-2 information. (#1579065) - Fix seg-fault parsing DWARF-2 information. (#1579051) - Fix seg-fault parsing a PE format file. (#1579019)�Z��g�ONick Clifton <nickc@redhat.com> 2.27-32.baseZ� @- Fix seg-fault parsing DWARF-1 information. (#1569580) - Fix seg-fault parsing DWARF-2 information. (#1569891) - Fix seg-fault parsing COFF files. (#1571917)x��g� Nick Clifton <nickc@redhat.com> 2.27-31.baseZ�@- Allow "lea foo@GOT, %reg" in PIC mode on the x86. (#1573872)�+��g�qNick Clifton <nickc@redhat.com> 2.27-30.baseZ��@- Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.{��g�Nick Clifton <nickc@redhat.com> 2.27-29.baseZ��- Add support for the GLOBALAUDIT dynamic linker tag. (#1439351)�m��g�uNick Clifton <nickc@redhat.com> 2.27-28.baseZ��- Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section. (#1557346) - Stop strip from replacing unknown relocs with null relocs. (#1545386) � ��� � P ^ �o�8�B�C� � ���'o� Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��&g�u Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� ��%g�W Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)���$g�? Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h��#gm Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)���"g�7 Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s��!g� Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�� g� Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��� g�9 Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561)� �� �!� Koba Karaputadze <kkaraputadze@cloudlinux.com> 2.27-44.base.1.tuxcare.els2g��- CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes�a�� ��' Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c��� o� Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m��g�u Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� ��g�W Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)���g�? Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h��gm Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)���g�7 Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s��g� Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779) � � � P ���� �b��0��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��/��y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]�4��.��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��-��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}�}��,��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��+�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��*��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��)�!� Koba Karaputadze <kkaraputadze@cloudlinux.com> 2.27-44.base.1.tuxcare.els2g��- CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes�a��(��' Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1e @- CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c $ v � $ �+��3� �M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��2��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���1�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} 9 �9 �+��5� �M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��4� �w Vadim Panov <vpanov@cloudlinux.com> - 3.10.0-1160.119.1.el7.tuxcare.els1f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���7� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��6� �w Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { � U %��x � �M��=� �} Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��<� �Y Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���;� �s Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���:� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��9� �9 Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��8� �/ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} G G �?��?� �_ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��>� �C Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���A� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��@� �w Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { � U %��x � �M��G� �} Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��F� �Y Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���E� �s Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���D� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��C� �9 Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��B� �/ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} � G>� ���K� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key���J� �i Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��I� �_ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��H� �C Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} � U %��x � �M��Q� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��P� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���O� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���N� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��M� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��L� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} � G> � ���U� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}���T� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��S� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��R� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} � U %��x � �M��[� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��Z� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���Y� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���X� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��W� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��V� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} � G> � ���_� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}���^� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��]� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��\� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} � � R� �p��f� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087}�M��e� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��d� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���c� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���b� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��a� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�L��`� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock V <3�V �L��j� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock���i� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}���h� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��g� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744} � Q � $��� �p��p� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087}�M��o� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��n� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���m� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���l� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�*��k�)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()" V <3�V �L��t� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock���s� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}���r� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��q� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744} X Q7�* X �M��y� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��x� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���w� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���v�)�Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els15]g��@- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - netfilter: x_tables: fix LED ID check in led_tg_check() {CVE-2024-56650} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}�*��u�)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()" � G> � ���}� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}���|� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��{� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��z� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} � � �7 � �{��� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}�*���)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els16]g��- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() {CVE-2024-35849} - btrfs: fix use-after-free when COWing tree bock and tracing is enabled {CVE-2024-56759}��� �)�Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els15]g��@- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - netfilter: x_tables: fix LED ID check in led_tg_check() {CVE-2024-56650} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}�*���)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()"�L��~� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock l . 9ul ���� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087}�M��� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} Z t #t Z ��� �)�Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els15]g��@- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - netfilter: x_tables: fix LED ID check in led_tg_check() {CVE-2024-56650} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}�*�� �)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()"�L��� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock���� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839} ] Q � *f] ���� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087}�M�� � �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�[�� �)� Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els17]g�_@- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - els15 crashes accessing CephFS storage from a cluster {CVE-2024-26689}�*�� �)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els16]g��- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() {CVE-2024-35849} - btrfs: fix use-after-free when COWing tree bock and tracing is enabled {CVE-2024-56759} Z t #t Z ����)�Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els15]g��@- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - netfilter: x_tables: fix LED ID check in led_tg_check() {CVE-2024-56650} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}�*���)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()"�L��� �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock���� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839} � Q � ��� � ���� �iVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els11]g$�- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - PCI: Add missing bridge lock to pci_bus_lock() {CVE-2024-46750} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - ALSA: pcm: Fix races among concurrent prealloc proc writes {CVE-2022-1048} - ALSA: pcm: Add debug print on memory allocation failure {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent read/write and buffer changes {CVE-2022-1048} - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls {CVE-2022-1048} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - packet: in recvmsg msg_name return at least sizeof sockaddr_ll {CVE-2022-20368} - Revert "net/packet: fix slab-out-of-bounds access in packet_recvmsg()" - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS {CVE-2022-2196}�?��� �_Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els10]g d�- xfs: don't walk off the end of a directory data block {CVE-2024-41013} - net/sched: cls_u32: fix netns refcount changes in u32_change() {CVE-2022-29581} - net/packet: fix slab-out-of-bounds access in packet_recvmsg() {CVE-2022-20368} - openvswitch: fix OOB access in reserve_sfa_size() {CVE-2022-2639} - net: sched: fix use-after-free in tc_new_tfilter() {CVE-2022-1055} - wifi: cfg80211: fix BSS refcounting bugs {CVE-2022-42720} - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() {CVE-2022-41674} - igmp: Add ip_mc_list lock in ip_check_mc_rcu {CVE-2022-20141} - af_key: Do not call xfrm_probe_algs in parallel {CVE-2022-3028} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - Squashfs: sanity check symbolic link size {CVE-2024-46744}�p��� �CVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087}�8��� �QVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els18]g��- HID: core: zero-initialize the report buffer {CVE-2024-50302} - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" - drm/amd/amdgpu: Fix GPR read from debugfs (v2) {CVE-2024-50282} - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - wifi: iwlegacy: Clear stale interrupts before resuming device {CVE-2024-50234} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - Update dependency for shim and signing key�[���)� Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els17]g�_@- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - els15 crashes accessing CephFS storage from a cluster {CVE-2024-26689}�*���)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els16]g��- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() {CVE-2024-35849} - btrfs: fix use-after-free when COWing tree bock and tracing is enabled {CVE-2024-56759} Z t #t Z ��� �)�Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els15]g��@- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() {CVE-2024-50282} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - netfilter: x_tables: fix LED ID check in led_tg_check() {CVE-2024-56650} - scsi: bfa: Fix use-after-free in bfad_im_module_exit() {CVE-2024-53227} - af_packet: avoid erroring out after sock_init_data() in packet_create() {CVE-2024-56606} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}�*�� �)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els14]g�F@- media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - btrfs: dev-replace: properly validate device names {CVE-2024-26791} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - ipc/sem.c: bugfix for semctl(,,GETZCNT) - Increase KEXEC_AUTO_RESERVED_SIZE to 256M - x86/apic/x2apic: set affinity of a single interrupt to one cpu - bonding:avoid repeated display of same link status change - xen/netfront: stop tx queues during live migration - xen/balloon: Support xend-based toolstack - md/raid5: fix oops during stripe resizing - block: fix null pointer dereference in blk_mq_rq_timed_out() - block: init flush rq ref count to 1 - blk-mq: Remove generation seqeunce - Revert "driver core: bus: Fix double free in driver API bus_register()"�L�� � �yVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els13]g@r@- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - Fix: Revert "smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" double lock���� �oVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els12]g-�@- mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - firmware_loader: Block path traversal {CVE-2024-47742} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839} Q � � ���5|y �b��(��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��'��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]�4��&��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��%��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}�}��$��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��#��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�N��"� �}Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els19]g�- drm: nv04: Fix out of bounds access {CVE-2024-27008} - media: uvcvideo: Fix double free in error path {CVE-2024-57980}�8��!� �QVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els18]g��- HID: core: zero-initialize the report buffer {CVE-2024-50302} - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" - drm/amd/amdgpu: Fix GPR read from debugfs (v2) {CVE-2024-50282} - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - wifi: iwlegacy: Clear stale interrupts before resuming device {CVE-2024-50234} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - Update dependency for shim and signing key�[�� �)� Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els17]g�_@- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - els15 crashes accessing CephFS storage from a cluster {CVE-2024-26689}�*�� �)�+Vadim Panov <vadim.panov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els16]g��- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format {CVE-2024-53104} - ALSA: 6fire: Release resources at card release {CVE-2024-53239} - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() {CVE-2024-35849} - btrfs: fix use-after-free when COWing tree bock and tracing is enabled {CVE-2024-56759} $ v � $ �+��+� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��*��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���)��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} M �O M �}��.��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]���-� � Vadim Panov <vpanov@cloudlinux.com> - 3.10.0-1160.119.1.el7.tuxcare.els2f��- Add dependency for updated shim and grub2 with new signing key� ��,� �wVadim Panov <vpanov@cloudlinux.com> - 3.10.0-1160.119.1.el7.tuxcare.els1f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { 4 � � � � z�N� �+��5� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��4��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���3��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�b��2��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��1��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]�4��0��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��/��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���7� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��6� �wVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { 7 � U�96� �b��<��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��;��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]�4��:��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��9��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}�&��8� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} $ v � $ �+��?� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��>��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���=��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���A� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��@� �wVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { ; x U %li x ���G��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�b��F��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��E��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]�4��D��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�+��C� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��B� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�P � 646e80f307b097b69b4bd656a791a8ef3fa0627532d99d443a9ac2290a38bcdaD�O � 48cb7344cdc7877c963a17bc9c8d19469aa7fe50f9bb0a7c16d1a05c1924be35D�N � 3c0b011e6e2242d432815ed55665c737ba84524773a7ab47988cb4c5607cf961D�M � 16b36f2e8e18f802e5c0caa3deff37f148f14371bf0029b184ab26dd544f77a1D�L � 6351ea10dddc2704cefd9a07c1f26cb8c3507cca2fd7294c11580f9df283aa7aD�K � 6ced3da4a4c42b51b31b1848ce76f377c62d81f8380c6d887bde571be4f08916D�J � 8f5e710ea4d2d91e42a9eda8188e2040dc3735aa2b2c938fa65f82210dc6572dD�I � ed584b1d71f339f9497833377c386c1d7fd6ec264351453f01fc3714ce65458bD�H � bd26d8d19480898dda502509d7b196f875b6fcb6a55fac5488e37923593b8fa6D�G � 6accb89876d6c85d54790ed03eaaf5229b6874a6d2324a90f9ab1506ae869c14D�F � 2c99f8ac8e50bf32ba123593cd0cbbb6796b224f2a9739224d0a3314fb9460e2D�E � fba14e9a91e33c96686bb035bf45b4c749fbf0ce70abba6c16eac466d4e800c4D�D � 08405240700bf4a5a66bcf91a2a713ec13a02dca44b04f950373b650d478f7b5D�C � 45cfd5d1ed8f02274423bd2cea54b287eaec6e7838d28f02a10993aafdc998c1D�B � 05656bc05f85c73f3d8232d05da9250ae2533748de686d3bd7276fc0b69c3ea7D�A � d70f1bd2e4ab91549b4ecbddc67dba8b1c6665e7e46227460217ee3b569adcb2D�@ � e2aa5131cb96d61e2d39f9791259c76813581b55333bd2afbd5fbe137b847a14D�? � d36aebaa43b36d88dc3e8748f784a0bb7b99405cb440b7a719f9822361474c72D�> � cc46e7d81c6b448149df304ce09a36de92dfc3decf5ed4effba96d428bbc3893D�= � a51710636afbf87ea07b5ac6fd47a862faf6e5f38d68d91930c9c0e2ed88ab83D�< � 3fac01b08a9b2b36f021f78146e11a9ba1d752f4d08752de079618b7926474c2D�; � f1d74034e1fd85a29ddbce0b44671475ae22c5e85ea9a079fed974be58e47ecdD�: � f667bfa167dcbd13ba4e40fff07a75c941f6776073726e10a8f8e56fa83860c8D�9 � 1ff33dded84163fc270265d4206af9b310a980b5949aada17ce649afb51b6c53D�8 � db1cf8c07aa3db29afa3b01db660fda92e142ab07121da196138466a572407b6D�7 � 238f0fdc85deb852dfe2915f911ba145de3b869be3b064fa10c8c5d1d8c15362D�6 � 83aa855679ffeb69361c25e0a8d48573487c558776c9721b8dfdd7cec012893eD�5 � 0e163fe7c931e8ef93b333a42e1b54af32775c0193497fecca1a5c3813d4e406D�4 � 8fd495cccd7739aa9b0a64f3411fe2065ca88375a2a2cd7e071bb6b26c4f74afD�3 � d1b0f80b35f57dcb8f79376a65222c29a7baef16e9f68352434adee902684c26D�2 � 539cece5c146331c339cf09bd60722c077f441c1744a019d8050a1f58de5fcc4D�1 � 5c17a904f6fae21bddbfed85174ccba9f409fee78568d524d543e6fed3f621a2D�0 � 8a6dba423d6bb9eadf51d3d4ce68f30a16f6f08b38654ca1c1240d877ca8e6c2D�/ � 59fa40608908fe8d43c02bd061caef2b61e536f34297792692de559a33710fdfD�. � ac2ef1862e4daaa85fd2949292bb64e427d617e838def449d4a6df1e5c4a96cbD�- � 41d6eccbb9878c16f3783426f81322e7e90d7c65460f655fa0c0bd044a4b7d5eD�, � 4fe8e61e12b14bc331381553b0d64379b7b2a3a93a1a967649ebe31a33f5120aD�+ � 0f62122de1b8adad88a6fa312bd919ba0fcdc949a8eab3f140d6b9f556eee6ecD�* � 097c94c5fe9d55c6ab7a6cf2618ed06402a4dfe59cb7eeaf7eb93b418a7922dcD�) � a0d07c83a19389dcef868be8702fbcb84f4eae6854e4fcd0535fd36453eab60bD�( � b8932402590a27d3839b8fb28feb7b73b4b9d8dddaf0004317313f9517e3f09dD�' � ce5f8a3d9faaacefbeed739f8e1b7cb85508b58581e3eee14ec9a418d48f0182D�& � 4e64220dbd9e0ca993364be822034cf9a12eae30fa6d3518249923613774bfb5D�% � 6f557f7219d46de6c2d669280d1428504a84692aaedf1bb76d807a0f3abfce42D�$ � 9792f97b8ef61c97da111966b91cd4b3b5faf16e9f545be2471560a87f593189D�# � 6ab400dbc65d940afcf820a655a1ae0ce9e15bb360d6a5013fbdcf141881a9f3D�" � 2c2f5896bf18752a8bac136ad573717701c68f8f35b4746aa32c96c20a453253D�! � 012a033c7ae83af919fa4e0bceffbbdfb7fae937d80fa6ae83fb110d5e2522b4D� � cdf954b916ccc92753ba5ac7d035bae43de2f0cbd1a429f5bb93d7da6dad3f13D� � 5922e538c8077e4683e23042810fefdeaaa0958784e22b2689244df4f30be2c3D� � 6825975d8162e4defc5f687d577e911dd5a16dd3e63d8f88fde685d048c4d2c8D� � 5cd1482096bec2293a219efa7b5e4818c88188dc2c23a29d66349f76886a2c07D� � 97df0e85d02dc921e402d7cac7a8225949b5b0a0245bc6126fab143edf7b377eD� � b30ce17e019314a558643fe0f0567739cec7b5cb32965f050ff978b49915d1acD� � 5a704460e51250eed4c9cb125466f628e54566e8cf1948eeb6e16e2b1097f011D� � e9bb01ba9418370734f98d1e613eedec9f6b696bec2336c1491fead7bfccd5e5 � ^�� � ���K� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��J� �wVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { @�+��I� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��H��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} U %�� �b��P��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��O��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]���N� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��M� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��L� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} $ v � $ �+��S� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��R��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���Q��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���U� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��T� �wVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { C � U %��� �b��Z��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]���Y� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���X� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��W� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��V� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} $ v � $ �+��]� �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��\��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���[��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���_� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��^� �wVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { G x U %��x �{��d� �YVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���c� �sVadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���b� �Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��a� �9Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��`� �/Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} $ v � $ �+��g� �M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��f��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���e�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} O �O ���i� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��h� �w Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { K � U %��x � �M��o� �} Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��n� �Y Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���m� �s Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���l� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��k� �9 Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��j� �/ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} � ^�� � ���s� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els2]f��- Add dependency for updated shim and grub2 with new signing key� ��r� �w Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els1]f��- kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513} - wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719} - mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719} - netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016} - xprtrdma: fix incorrect header size calculations {CVE-2022-0812} - net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171} - i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153} - pid: take a reference when initializing `cad_pid` {CVE-2021-47118} - Input: appletouch - initialize work before device registration {CVE-2021-46932} - HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906} - quota: check block number when reading the block in quota file {CVE-2021-45868} - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976} - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975} - isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389} - usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159} - can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693} - dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916} - KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178} - perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971} - btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964} - ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321} - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292} - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159} - btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149} - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679} - net: mac802154: Fix general protection fault {CVE-2021-3659} - nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129} - drm/nouveau: clean up all clients on device removal {CVE-2020-27820} - drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820} - drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820} - Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555} - vsock: Fix memory leak in vsock_connect() {CVE-2022-3629} - RDMA/core: Don't infoleak GRH fields {CVE-2021-3923} - xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741} - net: Rename and export copy_skb_header - floppy: use a statically allocated error counter {CVE-2022-1652} - fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() { O�+��q� �M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��p��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721] CVE-2023-6931} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829} - xen/netfront: fix leaking data in shared pages {CVE-2022-33740} - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390} - xen/blkfront: fix leaking data in shared pages {CVE-2022-26365} - mISDN: fix use-after-free bugs in l1oip timer handlers {CVE-2022-3565} - drm/vgem: Close use-after-free race in vgem_gem_create {CVE-2022-1419} - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type {CVE-2021-47194} - net: fix use-after-free in tw_timer_handler {CVE-2021-46936} - ext4: fix race writing to an inline_data file while its xattrs are changing {CVE-2021-40490} - virtio_console: Assure used length from device is limited {CVE-2021-38160} - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() {CVE-2021-4157} - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() {CVE-2021-3640} - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl {CVE-2021-3612} - Input: joydev - prevent potential read overflow in ioctl {CVE-2021-3612} - can: bcm: delay release of struct bcm_op after synchronize_rcu() {CVE-2021-3609} - vt: keyboard: avoid signed integer overflow in k_ascii {CVE-2020-13974} - i2c: Fix a potential use after free {CVE-2019-25162} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() {CVE-2023-1118} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566} - staging: rtl8712: fix use after free bugs {CVE-2022-4095} - ext4: fix kernel infoleak via ext4_extent_header {CVE-2022-0850} - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register {CVE-2022-1353} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265} - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265} - x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265} - ipv6: use prandom_u32() for ID generation {CVE-2021-45485} - bpf: Fix integer overflow in prealloc_elems_and_freelist() {CVE-2021-41864} - ipv4: make exception cache less predictible {CVE-2021-20322} - ipv4: use siphash instead of Jenkins in fnhe_hashfun() {CVE-2021-20322} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb {CVE-2022-1679} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-42753} - debug: Lock down kgdb {CVE-2022-21499} � U %��x � �M��y� �} Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els8]f��@- sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}�{��x� �Y Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els7]f�c�- wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940} - media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}���w� �s Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els6]f�)@- drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280} - USB: ene_usb6250: Allocate enough memory for full object {CVE-2023-45862} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627}���v� � Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els5]f��- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - net: fix __dst_negative_advice() race {CVE-2024-36971}�+��u� �9 Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els4]f��- xen/blkfront: force data bouncing when backend is untrusted {CVE-2022-33742} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - net: fix out-of-bounds access in ops_init {CVE-2024-36883}�&��t� �/ Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els3]f��@- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570} - Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570} - Revert: GFS2: fix skip unlock condition {CVE-2024-38570} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - ipv6: remove max_size check inline with ipv4 {CVE-2023-52340} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - ip: validate header length on virtual device xmit - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} x � " � C � b w & � !l3�d#�b|3�r�Ke � x J��i/ Paul Wouters <pwouters@redhat.com> - 2012.86-1P���- update to r1.86R��_I Joe Orton <jorton@redhat.com> - 2012.85-2P <�- add openssl to BuildRequiresE��_/ Joe Orton <jorton@redhat.com> - 2012.85-1P <�- update to r1.85���� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2012.81-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildE��_/ Joe Orton <jorton@redhat.com> - 2012.81-1O8�@- update to r1.81���� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2011.80-2O�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild���_�- Joe Orton <jorton@redhat.com> - 2011.80-1N�k@- update to r1.80 - fix handling of certs with dublicate Subject names (#733032)t��_� Joe Orton <jorton@redhat.com> - 2011.78-1N_s�- update to r1.78, removing trust from DigiNotar root (#734679)E��_/ Joe Orton <jorton@redhat.com> - 2011.75-1N98@- update to r1.75E��_/ Joe Orton <jorton@redhat.com> - 2011.74-1M��- update to r1.74���� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2011.70-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildE�� _/ Joe Orton <jorton@redhat.com> - 2011.70-1M-��- update to r1.70E�� _/ Joe Orton <jorton@redhat.com> - 2010.65-3L�7�- update to r1.65t�� _� Joe Orton <jorton@redhat.com> - 2010.63-3K�s�- package /etc/ssl/certs symlink for third-party apps (#572725)=�� _ Joe Orton <jorton@redhat.com> - 2010.63-2K�s�- rebuildy�� _� Joe Orton <jorton@redhat.com> - 2010.63-1K�s�- update to certdata.txt r1.63 - use upstream RCS version in VersionN��YG Joe Orton <jorton@redhat.com> - 2010-4K�g@- fix ca-bundle.crt (#575111)�4��Y� Joe Orton <jorton@redhat.com> - 2010-3K��- update to certdata.txt r1.58 - add /etc/pki/tls/certs/ca-bundle.trust.crt using 'TRUSTED CERTICATE' format - exclude ECC certs from the Java cacerts database - catch keytool failures - fail parsing certdata.txt on finding untrusted but not blacklisted cert�0��Y� Joe Orton <jorton@redhat.com> - 2010-2KPX�- fix Java cacert database generation: use Subject rather than Issuer for alias name; add diagnostics; fix some alias names.g��Yy Joe Orton <jorton@redhat.com> - 2010-1KK�- adopt Python certdata.txt parsing script from Debian����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2009-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildM��UI Joe Orton <jorton@redhat.com> 2009-1Jf�@- update to certdata.txt r1.53����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2008-8I���- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildM��UI Joe Orton <jorton@redhat.com> 2008-7H�- update to certdata.txt r1.49r�� m{ Thomas Fitzsimmons <fitzsim@redhat.com> - 2008-6Hb3@- Change generate-cacerts.pl to produce pretty aliases.g��U} Joe Orton <jorton@redhat.com> 2008-5HC�- include /etc/pki/tls/cert.pem symlink to ca-bundle.crtc��~Uu Joe Orton <jorton@redhat.com> 2008-4H;��- use package name for temp dir, recreate it in prept��}U� Joe Orton <jorton@redhat.com> 2008-3H;��- fix source script perms - mark packaged files as config(noreplace)���|U�] Joe Orton <jorton@redhat.com> 2008-2H;��- add (but don't use) mkcabundle.pl - tweak description - use /usr/bin/keytool directly; BR java-openjdkH��{U? Joe Orton <jorton@redhat.com> 2008-1H;��- Initial build (#448497)�p��z� �C Vadim Panov <vpanov@cloudlinux.com> [3.10.0-1160.119.1.el7.tuxcare.els9]f��- drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - kernel/exit.c: avoid undefined behaviour when calling wait4() {CVE-2018-10087} ` >�& K w"��&5�f�;�� ` � ��*c�[ Kai Engert <kaie@redhat.com> - 2014.1.98-71T�- Update to CKBI 1.98 from NSS 3.16.1 - building on RHEL 7 no longer requires java-openjdk - added more detailed instructions for release numbers on RHEL branches, to avoid problems when rebasing on both z- and y-stream branches.Q��)g? Daniel Mach <dmach@redhat.com> - 2013.1.95-71R�k�- Mass rebuild 2013-12-27_��(g[ Kai Engert <kaie@redhat.com> - 2013.1.95-70.1R�<�- Update to CKBI 1.95 from NSS 3.15.3.1}��'g� Kai Engert <kaie@redhat.com> - 2013.1.94-70.1Ra"�- Only create backup files if there is an original file, rhbz#999017[��&gS Kai Engert <kaie@redhat.com> - 2013.1.94-70.0R%�@- Update to CKBI 1.94 from NSS 3.15G��%c/ Kai Engert <kaie@redhat.com> - 2012.87-70.1Q�@- improve manpagek��$cw Kai Engert <kaie@redhat.com> - 2012.87-70.0Q�A- use a release version that 's larger than on rhel 6\��#cY Kai Engert <kaie@redhat.com> - 2012.87-10.4Q�@- clarification updates to manual page�l��"c�w Kai Engert <kaie@redhat.com> - 2012.87-10.3Qک�- added a manual page and related build requirements - simplify the README files now that we have a manual page - set a certificate alias in trusted bundle (thanks to Ludwig Nussel)h��!cq Kai Engert <kaie@redhat.com> - 2012.87-10.2Q�J�- use correct command in README files, rhbz#961809��� c�' Kai Engert <kaie@redhat.com> - 2012.87-10.1Qu&@- Add myself as contributor to certdata2.pem.py and remove use of rcs/ident. (thanks to Michael Shuler for suggesting to do so) - Update source URLs and comments, add source file for version information.��� c�# Kai Engert <kaie@redhat.com> - 2012.87-10.0QR�@- Use both label and serial to identify cert during conversion, rhbz#927601�P�� k�7 Kai Engert <kaie@redhat.com> - 2012.87-9.fc19.1QHS@- adjust to changed and new functionality provided by p11-kit 0.17.3 - updated READMEs to describe the new directory-specific treatment of files - ship a new file that contains certificates with neutral trust - ship a new file that contains distrust objects, and also staple a basic constraint extension to one legacy root contained in the Mozilla CA list - adjust the build script to dynamically produce most of above files - add and own the anchors and blacklist subdirectories - file generate-cacerts.pl is no longer required�O�� ]�C Kai Engert <kaie@redhat.com> - 2012.87-9Q9�- Major rework for the Fedora SharedSystemCertificates feature. - Only ship a PEM bundle file using the BEGIN TRUSTED CERTIFICATE file format. - Require the p11-kit package that contains tools to automatically create other file format bundles. - Convert old file locations to symbolic links that point to dynamically generated files. - Old files, which might have been locally modified, will be saved in backup files with .rpmsave extension. - Added a update-ca-certificates script which can be used to regenerate the merged trusted output. - Refer to the various README files that have been added for more detailed explanation of the new system. - No longer require rsc for building. - Add explanation for the future version numbering scheme, because the old numbering scheme was based on upstream using cvs, which is no longer true, and therefore can no longer be used. - Includes changes from rhbz#873369.�V�� k�C Kai Engert <kaie@redhat.com> - 2012.87-2.fc19.1Q8�@- Ship trust bundle file in /usr/share/pki/ca-trust-source/, temporarily in addition. This location will soon become the only place containing this file.���� � Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2012.87-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildw��i� Paul Wouters <pwouters@redhat.com> - 2012.87-1P��@- Updated to r1.87 to blacklist mis-issued turktrust CA certs�=��i� Paul Wouters <pwouters@redhat.com> - 2012.86-2P��@- Updated blacklist with 20 entries (Diginotar, Trustwave, Comodo(?) - Fix to certdata2pem.py to also check for CKT_NSS_NOT_TRUSTED O A l � � � $ C�.� �F� O ���:i�? Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] �- Update to CKBI 2.32 from NSS 3.44 - Removing: - # Certificate "Visa eCommerce Root" - # Certificate "AC Raiz Certicamara S.A." - # Certificate "TC TrustCenter Class 3 CA II" - # Certificate "ComSign CA" - # Certificate "S-TRUST Universal Root CA" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - Adding: - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "GTS Root R1" - # Certificate "GTS Root R2" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign Root CA - G1" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign Root CA - C1" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Hongkong Post Root CA 3"[��9gS Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z��- Update to CKBI 2.22 from NSS 3.35[��8cW Kai Engert <kaie@redhat.com> - 2017.2.20-71Z �@- Update to CKBI 2.20 from NSS 3.34.1b��7ce Kai Engert <kaie@redhat.com> - 2017.2.18-71Y��@- Update to CKBI 2.18 (pre-release snapshot)�?��6c� Kai Engert <kaie@redhat.com> - 2017.2.16-71Y�A@- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions, Mozilla removed code signing trust from all CAs (rhbz#1472933)[��5cW Kai Engert <kaie@redhat.com> - 2017.2.14-71Y.�- Update to CKBI 2.14 from NSS 3.30.2R��4cE Kai Engert <kaie@redhat.com> - 2017.2.11-73XA- No longer trust legacy CAs�:��3c� Kai Engert <kaie@redhat.com> - 2017.2.11-72X@- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format, as a preparation to fix bugs in the interaction between p11-kit-trust and Mozilla applications, such as Firefox, Thunderbird etc. - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true - Require p11-kit 0.23.5 - Added an utility to help with comparing output of the trust dump command.�\��2c�W Kai Engert <kaie@redhat.com> - 2017.2.11-71X~@- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications. - Use comments in extracted bundle files. - Change packaging script to support empty legacy bundles.|��1a� Kai Engert <kaie@redhat.com> - 2016.2.6-73W1�@- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)c��0ai Kai Engert <kaie@redhat.com> - 2015.2.6-72W �- Fixed a typo in a manual page (rhbz#1303960)s��/a� Kai Engert <kaie@redhat.com> - 2015.2.6-71V��@- Update to CKBI 2.6 from NSS 3.21 with legacy modifications.u��.a� Kai Engert <kaie@redhat.com> - 2015.2.4-71U8�- Update to CKBI 2.4 from NSS 3.18.1 with legacy modifications.m��-a} Kai Engert <kaie@redhat.com> - 2015.2.3-72U-@- Fix a typo in the ca-legacy manual page (rhbz#1208850)�P��,a�A Kai Engert <kaie@redhat.com> - 2015.2.3-71U�@- Update to CKBI 2.3 from NSS 3.18 with legacy modifications. - Add an alternative version of the "Thawte Premium Server CA" root, which carries a SHA1-RSA signature, to allow OpenJDK to verify applets which contain that version of the root certificate. This change doesn't add trust for another key, because both versions of the certificate use the same public key (rhbz#1170982). - Add a patch to the source RPM that documents the changes from the upstream version. - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf configuration file. - The new scriptlets require the coreutils package. - Remove the obsolete blacklist.txt file.�:��+g� Stef Walter <stefw@redhat.com> - 2014.1.98-72Tw�- The BasicConstraints fix for Entrust Root is no longer necessary. In addition it was invalid for p11-kit 0.20.x. rhbz#1130485 3 ��B� 3 �}��?i� Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b��- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020"���>i�) Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3"}��=i� Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N��<i�5 Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA"�e��;i�c Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. V # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certifi cate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" w �.w �2��Bi�} Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74b�z@- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A."\��AiS Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b�(�- Update to CKBI 2.54 from NSS 3.79�a��@i��Y Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72b�V�- Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - U � �Z��D��3 Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72d�i�- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.� ��C�� Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71d��- Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" # Certificate "A-Trust-Root-05" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "CA Disig" - # Certificate "CCA India 2011" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Class 1 Primary CA" - # Certificate "Cybertrust Global Root" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Equifax" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "E-Tugra Certification Authority" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Hongkong Post Root CA 1" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Standard root certificate" - # Certificate "IGC/A" - # Certificate "Japanese Government" - # Certificate "Juur-SK" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "LGPKI" - # Certificate "LuxTrust Global Root" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "SITHS CA v3" - # Certificate "Sonera Class2 CA" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "state-institutions" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "UTN-USERFirst-Object" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - Adding: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" � ;�- � �}��Ii� Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b��- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020"���Hi�) Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3"}��Gi� Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N��Fi�5 Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA"���E�%�} Pavel Kopylov <pkopylov@cloudlinux.com> - 2023.2.64_v7.0.306-72.tuxcare.els1ev��- Update to CKBI 2.64_v7.0.306 from NSS 3.95 - Removing: - # Certificate "AC1 RAIZ MTIN" - # Certificate "ACNLB" - # Certificate "Actalis Authentication CA G1" - # Certificate "AddTrust External CA Root" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "ADOCA02" - # Certificate "ANF Server CA" - # Certificate "A-Trust-Qual-03" - Y \ # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certifi cate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" w �.w �2��Li�} Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74b�z@- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A."\��KiS Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b�(�- Update to CKBI 2.54 from NSS 3.79�a��Ji��Y Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72b�V�- Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - [ � �Z��N��3 Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72d�i�- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.� ��M�� Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71d��- Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" # Certificate "A-Trust-Root-05" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "CA Disig" - # Certificate "CCA India 2011" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Class 1 Primary CA" - # Certificate "Cybertrust Global Root" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Equifax" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "E-Tugra Certification Authority" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Hongkong Post Root CA 1" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Standard root certificate" - # Certificate "IGC/A" - # Certificate "Japanese Government" - # Certificate "Juur-SK" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "LGPKI" - # Certificate "LuxTrust Global Root" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "SITHS CA v3" - # Certificate "Sonera Class2 CA" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "state-institutions" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "UTN-USERFirst-Object" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - Adding: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" 4 W��y��(�[ � 4 �#��[��A Dmitrii Zudin <dzudin@cloudlinux.com> - 2.11-28.tuxcare.els1e�r�- Fix integer overflow in dstring.c ds_fgetstr that triggers an out-of-bounds heap write{��Za� Ondrej Dubaj <odubaj@redhat.com> - 2.11-28^ku�- Improper input validation when writing tar header fields (#1766222)g��Ygk Pavel Raiskup <praiskup@redhat.com> - 2.11-27X�eB- don't segfault during recovery (rhbz#1318084)^��XgY Pavel Raiskup <praiskup@redhat.com> - 2.11-26X�eA- reproducible archives (rhbz#1386662)j��Wgq Pavel Raiskup <praiskup@redhat.com> - 2.11-25X�e@- fix crc checksum for files ~200M+ (rhbz#1415081)O��Vg; Pavel Raiskup <praiskup@redhat.com> - 2.11-24U��- fix for CVE-2014-9112� ��Ug�1 Pavel Raiskup <praiskup@redhat.com> - 2.11-23U\w@- better check for read() error (rhbz#1138148) - fix ru translation (rhbz#1075513)L��T]? Daniel Mach <dmach@redhat.com> - 2.11-22R�U�- Mass rebuild 2014-01-24L��S]? Daniel Mach <dmach@redhat.com> - 2.11-21R�k�- Mass rebuild 2013-12-27�A��Rg� Pavel Raiskup <praiskup@redhat.com> - 2.11-20QR�@- fix another bogus date in changelog - update config.guess/config.sub for aarm64 build (#925189) - run autoreconf instead of autoheadert��Qg� Pavel Raiskup <praiskup@redhat.com> - 2.11-19QC @- revert the fix for memory leak (at least for now) #921725�*��P�%�/ Pavel Kopylov <pkopylov@cloudlinux.com> - 2024.2.69_v7.0.306-72.tuxcare.els1f��- update to CKBI 2.69 from NSS 3.103 - updated certificates: - # Certificate "GLOBALTRUST 2020" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "Entrust Root Certification Authority" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "SecureTrust CA" - # Certificate "Secure Global CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "Certigna" - # Certificate "ePKI Root Certification Authority" - # Certificate "certSIGN ROOT CA" - # Certificate "SecureSign RootCA11" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate " a���O�%�} Pavel Kopylov <pkopylov@cloudlinux.com> - 2023.2.64_v7.0.306-72.tuxcare.els1ev��- Update to CKBI 2.64_v7.0.306 from NSS 3.95 - Removing: - # Certificate "AC1 RAIZ MTIN" - # Certificate "ACNLB" - # Certificate "Actalis Authentication CA G1" - # Certificate "AddTrust External CA Root" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "ADOCA02" - # Certificate "ANF Server CA" - # Certificate "A-Trust-Qual-03" - _ TWCA Global Root CA" - # Certificate "Atos TrustedRoot 2011" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "AC RAIZ FNMT-RCM" - # Certificate "Amazon Root CA 2" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "GlobalSign ECC Root CA - R4" - # Certificate "Security Communication RootCA3" - # Certificate "Security Communication ECC RootCA1" - removed certificates: - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "StartCom Certification Authority G2" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "StartCom Certification Authority" - # Certificate "CNNIC ROOT" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Global Chambersign Root" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - added certificates: - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - remove duplicated certificate record: - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" � �4� a � � ���u�""h���� � � c��sk_#Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��rk�w#Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services�6��q� �a"Pavel Kopylov <pkopylov@cloudlinux.com> 4.10.16-25.tuxcare.els1f|�- CVE-2023-34966: fix infinite loop vulnerability in mdssvc RPC service - some tests were added as skippedr��pk}"Andreas Schneider <asn@redhat.com> - 4.10.16-25d��@- resolves: #2222250 - Fix netlogon capabilities level 2z��ok� "Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��nk_"Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q��mk{"Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��lk�"Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��kk� "Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��jk� "Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��ik�7"Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��hk_"Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��gk�w"Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services�B��f��s!Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��ecK!Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��dc�m!Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��cco!Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��bc�!Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���ac�#!Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��`cO!Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��_c�!Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658)���^Q�M!Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��]cA!Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��\c�!Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888) V +� � � ~ � # h ��8��� ��u�>�� � V ��� k�?%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�� k�k%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�� kS%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�� k� %Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��i�/%Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"����+$Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���e�#$Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���k�;$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���k�%$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��ko$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��kS$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���k�?$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�� k�k$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��kS$Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��~k� $Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��}i�/$Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�6��|� �a#Pavel Kopylov <pkopylov@cloudlinux.com> 4.10.16-25.tuxcare.els1f|�- CVE-2023-34966: fix infinite loop vulnerability in mdssvc RPC service - some tests were added as skippedr��{k}#Andreas Schneider <asn@redhat.com> - 4.10.16-25d��@- resolves: #2222250 - Fix netlogon capabilities level 2z��zk� #Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��yk_#Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q��xk{#Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��wk�#Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��vk� #Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��uk� #Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��tk�7#Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl Q �0� � � N � � f � s�D�ue�k�p � Q ���'e�#'Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���&k�;'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���%k�%'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��$ko'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��#kS'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���"k�?'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��!k�k'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�� kS'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�� k� 'Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �� i�/'Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"�� ��+&Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character��� e�#&Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���k�;&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���k�%&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��ko&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��kS&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���k�?&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��k�k&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��kS&Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��k� &Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��i�/&Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"����+%Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���e�#%Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���k�;%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���k�%%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��ko%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�� kS%Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212 V Y� � ) z � � � � f�/���G�w�T�%� V �:��@k� *Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��?i�/*Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"��>��+)Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���=e�#)Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���<k�;)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���;k�%)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��:ko)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��9kS)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���8k�?)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��7k�k)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��6kS)Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��5k� )Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��4i�/)Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"��3��+(Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���2e�#(Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���1k�;(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���0k�%(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��/ko(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��.kS(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���-k�?(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��,k�k(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��+kS(Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��*k� (Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��)i�/(Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"��(��+'Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character S ��W � � � d � 5 � f V�\�a�B� �k�# � S k��[ko,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��ZkS,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���Yk�?,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��Xk�k,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��WkS,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��Vk� ,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��Ui�/,Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"��T��++Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���Se�#+Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���Rk�;+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���Qk�%+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��Pko+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��OkS+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���Nk�?+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��Mk�k+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��LkS+Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:��Kk� +Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� ��Ji�/+Tomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally�"��I��+*Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���He�#*Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���Gk�;*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���Fk�%*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark��Eko*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]��DkS*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212���Ck�?*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*��Bk�k*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]��AkS*Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460 ) � t�U � � | ? � � N � O � j ] �s ����Y����d&����' � � ]��eY-Florian La Roche <Florian.LaRoche@redhat.de>>���- update to 7.10.4 - adapt nousr patch0��E -Tim Powers <timp@redhat.com>>.��- rebuilte��Ww-Joe Orton <jorton@redhat.com> 7.9.8-4>-6@- don't add -L/usr/lib to 'curl-config --libs' output>��a -Nalin Dahyabhai <nalin@redhat.com> 7.9.8-3>�@- rebuild�B�� W�/-Joe Orton <jorton@redhat.com> 7.9.8-2=�@- fix `curl-config --libs` output for libdir!=/usr/lib - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la - libtoolize and reconfK��k/-Trond Eivind Glomsrød <teg@redhat.com> 7.9.8-1=;�- 7.9.8 (# 69473):��~E3-Tim Powers <timp@redhat.com>=@- automated rebuild:��}E3-Tim Powers <timp@redhat.com><��@- automated rebuildA��|k-Trond Eivind Glomsrød <teg@redhat.com> 7.9.7-1<�@- 7.9.7A��{k-Trond Eivind Glomsrød <teg@redhat.com> 7.9.6-1<ƞ@- 7.9.6���zk�7-Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-2<��@- Stop the curl-config script from printing -I/usr/include and -L/usr/lib (#59497)A��yk-Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-1<���- 7.9.5C��xk -Trond Eivind Glomsrød <teg@redhat.com> 7.9.3-2<{x�- RebuildF��wa/-Nalin Dahyabhai <nalin@redhat.com> 7.9.3-1<N��- update to 7.9.3B��vU3-Tim Powers <timp@redhat.com> 7.9.2-2<<0�- automated rebuildA��uk-Trond Eivind Glomsrød <teg@redhat.com> 7.9.2-1<<0�- 7.9.2� ��tQ�q-Nalin Dahyabhai <nalin@redhat.com>;}@- include curl-config in curl-devel - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurlR��s]K-Crutcher Dunnavant <crutcher@redhat.com>;Uz@- added openssl-devel build req=��rE9-Tim Powers <timp@redhat.com>; @- built for the distroO��qG[-Jeff Johnson <jbj@redhat.com>:�j�- upgrade to curl-7.7.2. - enable IPv6.H��pEO-Tim Powers <timp@redhat.com>:��@- rebuilt against openssl-0.9.6-1]��oEy-Tim Powers <timp@redhat.com>:Te�- fixed mising ldconfigs - updated to 7.5.2, bug fixes9��nE1-Tim Powers <timp@redhat.com>:4��- updated to 7.5.1�6��mE�)-Tim Powers <timp@redhat.com>:�@- update to 7.4.1 to fix bug #20337, problems with curl -c - not using patch anymore, it's included in the new source. Keeping for referenceN��lQO-Nalin Dahyabhai <nalin@redhat.com>9�3�- fix bogus req in -devel packageb��kE�-Tim Powers <timp@redhat.com>9�3�- devel package needed defattr so that root owns the files{��jQ�'-Nalin Dahyabhai <nalin@redhat.com>9��- update to 7.3 - apply vsprintf/vsnprintf patch from Colin Phipps via Debianu��iQ�-Nalin Dahyabhai <nalin@redhat.com>9��- enable SSL support - fix packager tag - move buildroot to %{_tmppath}H��hEO-Tim Powers <timp@redhat.com>9���- fixed vendor tag for bug #150286��gQ -Prospector <prospector@redhat.com>9|/�- rebuilt[��fEu-Tim Powers <timp@redhat.com>9k @- workaround alpha build problems with optimizations0��eE -Tim Powers <timp@redhat.com>9i��- rebuiltZ��dEs-Tim Powers <timp@redhat.com>9;�@- put man pages in correct place - use %makeinstall9��cE1-Tim Powers <timp@redhat.com>97@- updated to 6.5.2O��bE]-Tim Powers <timp@redhat.com>8 #�- updated sources to 6.2 - gzip man page6��aE+-Tim Powers <timp@redhat.com>7�r@- changed group� ��`E�}-Tim Powers <timp@redhat.com>7�,@- changelog started - general cleanups, changed prefix to /usr, added manpage to files section - including in Powertools�"��_��+,Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1:1.6.3-52.tuxcare.els1f���- CVE-2023-4504: scan_ps(): check for null terminator after backslash character���^e�#,Bryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation���]k�;,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]���\k�%,Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var & � ��7�u# � S � C � � f � � b����/��S�C��V�G �. � � ��*k�W-Ivana Varekova <varekova@redhat.com> - 7.15.1-2C���- fix multilib problem - #181290 - curl-devel.i386 not installable together with curl-devel.x86-64h��)qc-Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2.1C�@- bump again for double-long bug on ppc(64)n��(ms-Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��'S -Jesse Keating <jkeating@redhat.com>C�q�- rebuiltW��&gK-Ivana Varekova <varekova@redhat.com> 7.15.1-1C� @- update to 7.15.1 (bug 175191)k��%gs-Ivana Varekova <varekova@redhat.com> 7.15.0-3C��@- fix curl-config bug 174556 - missing vernum valueA��$g -Ivana Varekova <varekova@redhat.com> 7.15.0-2Cq�- rebuiltJ��#g1-Ivana Varekova <varekova@redhat.com> 7.15.0-1CT�- update to 7.15.0J��"g1-Ivana Varekova <varekova@redhat.com> 7.14.1-1CNL@- update to 7.14.1M��!g7-Ivana Varekova <varekova@redhat.com> 7.14.0-1B�i�- rebuild new version��� g�?-Ivana Varekova <varekova@redhat.com> 7.13.1-3Bwg�- fix bug 150768 - curl-7.12.3-2 breaks basic authentication used Daniel Stenberg patchu�� Y�-Joe Orton <jorton@redhat.com> 7.13.1-2Bl�- update to use ca-bundle in /etc/pki - mark License as MIT not MPLJ�� g1-Ivana Varekova <varekova@redhat.com> 7.13.1-1B.�@- rebuilt (7.13.1)N�� YG-Tomas Mraz <tmraz@redhat.com> 7.13.0-2B$Y@- rebuild with openssl-0.9.7e8�� W -Florian La Roche <laroche@redhat.com>BA@- 7.13.0���Y�[-Joe Orton <jorton@redhat.com> 7.12.3-3B �@- don't pass /usr to --with-libidn to remove "-L/usr/lib" from 'curl-config --libs' output on x86_64.�W��a�O-Adrian Havill <havill@redhat.com> 7.12.3-1A�)@- Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794) - require libidn-devel for devel subpkg (#141341) - remove proftpd kludge; included upstream�d��a�i-Adrian Havill <havill@redhat.com> 7.12.1-1Ac�@- upgrade to 7.12.1 - enable GSSAPI auth (#129353) - enable I18N domain names (#134595) - workaround for broken ProFTPD SSL auth (#134133). Thanks to Aleksandar Milivojevice��am-Adrian Havill <havill@redhat.com> 7.12.0-4AZ��- move new docs position so defattr gets appliedc��cg-Warren Togami <wtogami@redhat.com> 7.12.0-3AX �- remove INSTALL, move libcurl docs to -develT��M_-Jindrich Novy <jnovy@redhat.com>A�@- updated to 7.12.0 - updated nousr patch3��K -Elliot Lee <sopwith@redhat.com>@��- rebuiltq��a�-Adrian Havill <havill@redhat.com> 7.11.1-1@s�@- upgraded; updated nousr patch - added COPYING (#115956) -3��K -Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��K -Elliot Lee <sopwith@redhat.com>@,�@- rebuiltk��eu-Florian La Roche <Florian.LaRoche@redhat.de>@��- update to 7.10.8 - remove patch2, already upstream�B��a�%-Adrian Havill <havill@redhat.com> 7.10.6-7?�6�- aclocal before libtoolize - move OpenLDAP license so it's present as a doc file, present in both the source and binary as per conditions� ��a�;-Adrian Havill <havill@redhat.com> 7.10.6-6?���- add OpenLDAP copyright notice for usage of code, add OpenLDAP license for this codec��ai-Adrian Havill <havill@redhat.com> 7.10.6-5?���- match serverAltName certs with SSL (#106168)L�� e7-Adrian Havill <havill@redhat.com> 7.10.6-4.1?f�A- bump n-v-r for RHEL� �� a�;-Adrian Havill <havill@redhat.com> 7.10.6-4?f�@- restore ca cert bundle (#104400) - require openssl, we want to use its ca-cert bundle:�� Y -Joe Orton <jorton@redhat.com> 7.10.6-3?[ �- rebuildN�� ]C-Joe Orton <jorton@redhat.com> 7.10.6-2.2?Xz�- fix to include libcurl.soL�� e7-Adrian Havill <havill@redhat.com> 7.10.6-2.1?I�A- bump n-v-r for RHELn��a-Adrian Havill <havill@redhat.com> 7.10.6-2?I�@- devel subpkg needs openssl-devel as a Require (#102963)E��a--Adrian Havill <havill@redhat.com> 7.10.6-1?%@- bumped versionE��a--Adrian Havill <havill@redhat.com> 7.10.5-1?w�- bumped version3��K -Elliot Lee <sopwith@redhat.com>>��@- rebuilt * �7�� � 0 � � m � A ��B�F���X�X�~�* ~��G_� -Jindrich Novy <jnovy@redhat.com> 7.17.1-2GD �- update description to contain complete supported servers list (#393861)�M��F_�=-Jindrich Novy <jnovy@redhat.com> 7.17.1-1G>�- update to curl 7.17.1 - include patch to enable SSL usage in NSS when a socket is opened nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)f��Eao-Jindrich Novy <jnovy@redhat.com> 7.16.4-10G 3�- correctly provide/obsolete curl-devel (#130251)l��D_}-Jindrich Novy <jnovy@redhat.com> 7.16.4-9G 3�- create libcurl and libcurl-devel subpackages (#130251)z��C_�-Jindrich Novy <jnovy@redhat.com> 7.16.4-8G@- list features correctly when curl is compiled against NSS (#316191)~��B_� -Jindrich Novy <jnovy@redhat.com> 7.16.4-7F�l@- add zlib-devel BR to enable gzip compressed transfers in curl (#292211)Q��A_G-Jindrich Novy <jnovy@redhat.com> 7.16.4-6F�1�- provide webclient (#225671)�Z��@_�W-Jindrich Novy <jnovy@redhat.com> 7.16.4-5F��- add support for the NSS PKCS#11 pem reader so the command-line is the same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com) - switch to NSS againZ��?_Y-Jindrich Novy <jnovy@redhat.com> 7.16.4-4F�@- revert back to use OpenSSL (#266021)X��>_U-Jindrich Novy <jnovy@redhat.com> 7.16.4-3FҼ�- don't use openssl, use nss insteadr��=_�-Jindrich Novy <jnovy@redhat.com> 7.16.4-2F�S@- fix anonymous ftp login (#251570), thanks to David CantrellF��<_1-Jindrich Novy <jnovy@redhat.com> 7.16.4-1F��@- update to 7.16.4�7��;_�-Jindrich Novy <jnovy@redhat.com> 7.16.3-1F�@- update to 7.16.3 - drop .print patch, applied upstream - next series of merge review fixes by Paul Howarth - remove aclocal stuff, no more needed - simplify makefile arguments - don't reference standard library paths in libcurl.pc - include docs/CONTRIBUTEu��:_� -Jindrich Novy <jnovy@redhat.com> 7.16.2-5Fvs�- don't print like crazy (#236981), backported from upstream CVS�o��9_�-Jindrich Novy <jnovy@redhat.com> 7.16.2-4Fr@- another series of review fixes (#225671), thanks to Paul Howarth - check version of ldap library automatically - don't use %makeinstall and preserve timestamps - drop useless patches� ��8_�=-Jindrich Novy <jnovy@redhat.com> 7.16.2-3FDZ�- add automake BR to curl-devel to fix aclocal dir. ownership, thanks to Patrice Dumasx��7_�-Jindrich Novy <jnovy@redhat.com> 7.16.2-2FC @- package libcurl.m4 in curl-devel (#239664), thanks to Quy TonthatF��6_1-Jindrich Novy <jnovy@redhat.com> 7.16.2-1F �- update to 7.16.2b��5_i-Jindrich Novy <jnovy@redhat.com> 7.16.1-3Eّ@- don't create/ship static libraries (#225671)_��4_c-Jindrich Novy <jnovy@redhat.com> 7.16.1-2E� @- merge review related spec fixes (#225671)F��3_1-Jindrich Novy <jnovy@redhat.com> 7.16.1-1E��- update to 7.16.1���2_�3-Jindrich Novy <jnovy@redhat.com> 7.16.0-5E��@- don't package generated makefiles for docs/examples to avoid multilib conflicts���1_�+-Jindrich Novy <jnovy@redhat.com> 7.16.0-4E���- convert spec to UTF-8 - don't delete BuildRoot in %prep phase - rpmlint fixes���0a�M-Jindrich Novy <jnovy@redhat.com> -7.16.0-3E\R�- prevent curl from dlopen()ing missing ldap libraries so that ldap:// requests work (#215928)�2��/c�-Jindrich Novy <jnovy@redhat.com> - 7.16.0-2EG:�- fix BuildRoot - add Requires: pkgconfig for curl-devel - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)M��.c;-Jindrich Novy <jnovy@redhat.com> - 7.16.0-1EE�@- update to curl-7.16.0`��-kY-Jindrich Novy <jnovy@redhat.com> - 7.15.5-1.fc6D�- update to curl-7.15.5 - use %{?dist}L��,k1-Ivana Varekova <varekova@redhat.com> - 7.15.4-1D�@- update to 7.15.4u��+k�-Ivana Varekova <varekova@redhat.com> - 7.15.3-1D �@- fix multilib problem using pkg-config - update to 7.15.3 n �F � 4 � ) . D � s �R�Z���X���z�; � n Z��c][-Kamil Dudka <kdudka@redhat.com> 7.19.4-9I��- add missing BuildRequire for autoconfk��b]}-Kamil Dudka <kdudka@redhat.com> 7.19.4-8I��- fix configure.ac to not discard -g in CFLAGS (#496778)���ak�%-Debarshi Ray <rishi@fedoraproject.org> 7.19.4-7I�@- Fixed configure to respect the environment's CFLAGS and CPPFLAGS settings.�.��`]�-Kamil Dudka <kdudka@redhat.com> 7.19.4-6I�z�- upstream patch fixing memory leak in lib/nss.c (#453612) - remove redundant dependency of libcurl-devel on libssh2-devel���_]�5-Kamil Dudka <kdudka@redhat.com> 7.19.4-5I��@- enable 6 additional crypto algorithms by default (#436781, accepted by upstream)� ��^]�%-Kamil Dudka <kdudka@redhat.com> 7.19.4-4I��@- fix memory leak in src/main.c (accepted by upstream) - avoid using %ifarchd��]]o-Kamil Dudka <kdudka@redhat.com> 7.19.4-3I���- make libcurl-devel multilib-ready (bug #488922)� ��\_�[-Jindrich Novy <jnovy@redhat.com> 7.19.4-2I�@- drop .easy-leak patch, causes problems in pycurl (#488791) - fix libcurl-devel dependencies (#488895)�>��[_� -Jindrich Novy <jnovy@redhat.com> 7.19.4-1I��- update to 7.19.4 (fixes CVE-2009-0037) - fix leak in curl_easy* functions, thanks to Kamil Dudka - drop nss-fix patch, applied upstream���Z��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��Y]�;-Kamil Dudka <kdudka@redhat.com> 7.19.3-1I���- update to 7.19.3, dropped applied nss patches - add patch fixing 7.19.3 curl/nss bugs]��X__-Jindrich Novy <jnovy@redhat.com> 7.18.2-9IFF�- rebuild for f10/rawhide cvs tag clashesq��W_�-Jindrich Novy <jnovy@redhat.com> 7.18.2-8I:i@- use improved NSS patch, thanks to Rob Crittenden (#472489)y��V_�-Jindrich Novy <jnovy@redhat.com> 7.18.2-7H�e@- update the thread safety patch, thanks to Rob Crittenden (#462217)w��Uc� -Warren Togami <wtogami@redhat.com> 7.18.2-6H�|@- add thread safety to libcurl NSS cleanup() functions (#459297)U��Tq=-Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-5H��@- undo mini libcurl.so.3f��Sq_-Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-4H�)�- make miniature library for libcurl.so.3Z��R_Y-Jindrich Novy <jnovy@redhat.com> 7.18.2-3Hn�- enable support for libssh2 (#453958)���Q_�'-Jindrich Novy <jnovy@redhat.com> 7.18.2-2HX��- fix curl_multi_perform() over a proxy (#450140), thanks to Rob CrittendenF��P_1-Jindrich Novy <jnovy@redhat.com> 7.18.2-1HF��- update to 7.18.2�e��O_�m-Jindrich Novy <jnovy@redhat.com> 7.18.1-2H!��- spec cleanup, thanks to Paul Howarth (#225671) - drop BR: libtool - convert CHANGES and README to UTF-8 - _GNU_SOURCE in CFLAGS is no more needed - remove bogus rpath�v��N_�-Jindrich Novy <jnovy@redhat.com> 7.18.1-1G��@- update to curl 7.18.1 (fixes #397911) - add ABI docs for libcurl - remove --static-libs from curl-config - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf substitution (#432667)t��M_� -Jindrich Novy <jnovy@redhat.com> 7.18.0-2G�~�- define _GNU_SOURCE so that NI_MAXHOST gets defined from glibc���L_�?-Jindrich Novy <jnovy@redhat.com> 7.18.0-1G��- update to curl-7.18.0 - drop sslgen patch -> applied upstream - fix typo in description���K_�/-Jindrich Novy <jnovy@redhat.com> 7.17.1-6G��- fix curl-devel obsoletes so that we don't break F8->F9 upgrade path (#429612)���J_�'-Jindrich Novy <jnovy@redhat.com> 7.17.1-5G�e�- do not attempt to close a bad socket (#427966), thanks to Caolan McNamara|��I_�-Jindrich Novy <jnovy@redhat.com> 7.17.1-4GUA@- rebuild because of the openldap soname bump - remove old nsspem patch�5��H_� -Jindrich Novy <jnovy@redhat.com> 7.17.1-3GO�@- drop useless ldap library detection since curl doesn't dlopen()s it but links to it -> BR: openldap-devel - enable LDAPS support (#225671), thanks to Paul Howarth - BR: krb5-devel to reenable GSSAPI support - simplify build process - update description j j�t � � � 2 � � 0 ���� �5�� �E�f�h� � j � ��]�7-Kamil Dudka <kdudka@redhat.com> 7.19.7-5KK@- avoid use of uninitialized value in lib/nss.c - suppress failure of test513 on s390��� ]�M-Kamil Dudka <kdudka@redhat.com> 7.19.7-4K@- do not require valgrind on s390 and s390x - temporarily disabled SCP/SFTP test-suite (#539444)�R��]�I-Kamil Dudka <kdudka@redhat.com> 7.19.7-3J���- fix crash on doubly closed NSPR descriptor, patch contributed by Kevin Baughman (#534176) - new version of patch for broken TLS servers (#525496, #527771)[��~]]-Kamil Dudka <kdudka@redhat.com> 7.19.7-2J�l�- increased release number (CVS problem)���}]�Y-Kamil Dudka <kdudka@redhat.com> 7.19.7-1J�l�- new upstream release, dropped applied patches - workaround for broken TLS servers (#525496, #527771)j��|_y-Kamil Dudka <kdudka@redhat.com> 7.19.6-13Jս@- fix timeout issues and gcc warnings within lib/nss.cm��{_-Kamil Dudka <kdudka@redhat.com> 7.19.6-12J�1@- upstream patch for NSS support written by Guenter Knaufa��z_g-Kamil Dudka <kdudka@redhat.com> 7.19.6-11J�H@- build libcurl with c-ares support (#514771)]��y__-Kamil Dudka <kdudka@redhat.com> 7.19.6-10J�S�- require libssh2>=1.2 properly (#525002)w��x]�-Kamil Dudka <kdudka@redhat.com> 7.19.6-9J�@- let curl test-suite use valgrind - require libssh2>=1.2 (#525002)Q��wg?-Chris Weyl <cweyl@alumni.drew.edu> - 7.19.6-8J�j�- rebuild for libssh2 1.2V��v]S-Kamil Dudka <kdudka@redhat.com> 7.19.6-7J�$�- make curl test-suite more verboseh��u]w-Kamil Dudka <kdudka@redhat.com> 7.19.6-6J��@- update polling patch to the latest upstream versiond��t]o-Kamil Dudka <kdudka@redhat.com> 7.19.6-5J���- cover ssh and stunnel support by the test-suite�V��s]�Q-Kamil Dudka <kdudka@redhat.com> 7.19.6-4J�^@- use pkg-config to find nss and libssh2 if possible - better patch (not only) for SCP/SFTP polling - improve error message for not matching common name (#516056)���r]�Y-Kamil Dudka <kdudka@redhat.com> 7.19.6-3J��@- avoid tight loop during a sftp upload - http://permalink.gmane.org/gmane.comp.web.curl.library/24744k��q]}-Kamil Dudka <kdudka@redhat.com> 7.19.6-2J���- let curl package depend on the same version of libcurl�T��p]�M-Kamil Dudka <kdudka@redhat.com> 7.19.6-1J�Q�- new upstream release, dropped applied patches - changed NSS code to not ignore the value of ssl.verifyhost and produce more verbose error messages (#516056)a��ok[-Ville Skyttä <ville.skytta@iki.fi> - 7.19.5-10J���- Use lzma compressed upstream tarball.���n��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.5-9Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild�^��m]�a-Kamil Dudka <kdudka@redhat.com> 7.19.5-8Jf�@- do not pre-login to all PKCS11 slots, it causes problems with HW tokens - try to select client certificate automatically when not specified, thanks to Claes Jakobsson��l]�#-Kamil Dudka <kdudka@redhat.com> 7.19.5-7JW-@- fix SIGSEGV when using NSS client certificates, thanks to Claes Jakobsson|��k]� -Kamil Dudka <kdudka@redhat.com> 7.19.5-6JP��- force test suite to use the just built libcurl, thanks to Paul Howarthh��j]w-Kamil Dudka <kdudka@redhat.com> 7.19.5-5JL�@- run test suite after build - enable built-in manualc��i]m-Kamil Dudka <kdudka@redhat.com> 7.19.5-4JBA- fix bug introduced by the last build (#504857)d��h]o-Kamil Dudka <kdudka@redhat.com> 7.19.5-3JB@- exclude curlbuild.h content from spec (#504857)���g]�)-Kamil Dudka <kdudka@redhat.com> 7.19.5-2J/�@- avoid unguarded comparison in the spec file, thanks to R P Herrold (#504857)^��f]c-Kamil Dudka <kdudka@redhat.com> 7.19.5-1J�@- update to 7.19.5, dropped applied patches���e_�A-Kamil Dudka <kdudka@redhat.com> 7.19.4-11J@- fix infinite loop while loading a private key, thanks to Michael Cronenworth (#453612)���d_�E-Kamil Dudka <kdudka@redhat.com> 7.19.4-10I��@- fix curl/nss memory leaks while using client certificate (#453612, accepted by upstream) E ��� � � � � I � e�����3���� � E ���]�K-Kamil Dudka <kdudka@redhat.com> 7.21.2-1L��@- new upstream release, drop applied patches - make 0102-curl-7.21.2-debug.patch less intrusive:��3E-jkeating - 7.21.1-6L�*@- Rebuilt for gcc bug 634757p��]�-Kamil Dudka <kdudka@redhat.com> 7.21.1-5L�o@- make it possible to run SCP/SFTP tests on x86_64 (#632914)k��]}-Kamil Dudka <kdudka@redhat.com> 7.21.1-4L�)@- work around glibc/valgrind problem on x86_64 (#631449)�~��_� -Paul Howarth <paul@city-fan.org> 7.21.1-3Ls�@- fix up patches so there's no need to run autotools in the rpm build - drop buildreq automake - drop dependency on automake for devel package from F-14, where %{_datadir}/aclocal is included in the filesystem package - drop dependency on pkgconfig for devel package from F-11, where pkgconfig dependencies are auto-generated�`��]�e-Kamil Dudka <kdudka@redhat.com> 7.21.1-2Lrb�- re-enable test575 on s390(x), already fixed (upstream commit d63bdba) - modify system headers to work around gcc bug (#617757) - curl -T now ignores file size of special files (#622520) - fix kerberos proxy authentication for https (#625676) - work around glibc/valgrind problem on x86_64 (#626470)I��]9-Kamil Dudka <kdudka@redhat.com> 7.21.1-1Lc�@- new upstream releaseM��WG-Dan Horák <dan[at]danny.cz> 7.21.0-3L;�- disable test 575 on s390(x)b��]k-Kamil Dudka <kdudka@redhat.com> 7.21.0-2L(��- add support for NTLM authentication (#603783)�5��]�-Kamil Dudka <kdudka@redhat.com> 7.21.0-1L��- new upstream release, drop applied patches - update of %description - disable valgrind for certain test-cases (libssh2 problem)q��]�-Kamil Dudka <kdudka@redhat.com> 7.20.1-6K���- fix -J/--remote-header-name to strip CR-LF (upstream patch)�M��]�?-Kamil Dudka <kdudka@redhat.com> 7.20.1-5K�#@- CRL support now works again (#581926) - make it possible to start a testing OpenSSH server when building with SELinux in the enforcing mode (#521087)�9��]�-Kamil Dudka <kdudka@redhat.com> 7.20.1-4K��@- upstream patch preventing failure of test536 with threaded DNS resolver - upstream patch preventing SSL handshake timeout underflow�7��_�-Paul Howarth <paul@city-fan.org> 7.20.1-3K�:@- replace Rawhide s390-sleep patch with a more targeted patch adding a delay after tests 513 and 514 rather than after all tests��� ]�I-Kamil Dudka <kdudka@redhat.com> 7.20.1-2K��- experimentally enabled threaded DNS lookup - make curl-config multilib ready again (#584107)I�� ]9-Kamil Dudka <kdudka@redhat.com> 7.20.1-1K�E�- new upstream release^�� ]c-Kamil Dudka <kdudka@redhat.com> 7.20.0-4K��@- add missing quote in libcurl.m4 (#576252)�X�� ]�U-Kamil Dudka <kdudka@redhat.com> 7.20.0-3K�g@- throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972) - valgrind temporarily disabled (#574889) - kerberos installation prefix has been changedc�� ]m-Kamil Dudka <kdudka@redhat.com> 7.20.0-2K��- exclude test1112 from the test suite (#565305)� ��]�c-Kamil Dudka <kdudka@redhat.com> 7.20.0-1Ks�@- new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP - dropped patches applied upstream - dropped curl-7.16.0-privlibs.patch no longer useful - a new patch forcing -lrt when linking the curl tool and test-cases� ��_�[-Kamil Dudka <kdudka@redhat.com> 7.19.7-11Kb�- upstream patch adding a new option -J/--remote-header-name - dropped temporary workaround for #545779Q��eA-Chris Weyl <cweyl@alumni.drew.edu> 7.19.7-10KO@- bump for libssh2 rebuildx��]�-Kamil Dudka <kdudka@redhat.com> 7.19.7-9K.�- temporary workaround for #548269 (restored behavior of 7.19.7-4)f��]s-Kamil Dudka <kdudka@redhat.com> 7.19.7-8K �A- replace hard wired port numbers in the test suite���]�A-Kamil Dudka <kdudka@redhat.com> 7.19.7-7K �@- use different port numbers for 32bit and 64bit builds - temporary workaround for #545779z��]�-Kamil Dudka <kdudka@redhat.com> 7.19.7-6K ?�- make it possible to run test241 - re-enable SCP/SFTP tests (#539444) } �& cO�P��k �U � } _��+]e-Kamil Dudka <kdudka@redhat.com> 7.21.7-1N*�- new upstream release (fixes CVE-2011-2192)q��*]�-Kamil Dudka <kdudka@redhat.com> 7.21.6-2M�d@- avoid an invalid timeout event on a reused handle (#679709)J��)_9-Paul Howarth <paul@city-fan.org> 7.21.6-1M��@- new upstream releasew��(]�-Kamil Dudka <kdudka@redhat.com> 7.21.5-2M�'�- fix the output of curl-config --version (upstream commit 82ecc85)I��']9-Kamil Dudka <kdudka@redhat.com> 7.21.5-1M�'�- new upstream releaseV��&iG-Peter Robinson <pbrobinson@gmail.com> 7.21.4-4M���- no valgrind on ARMv5 archesQ��%_G-Dennis Gilmore <dennis@ausil.us> 7.21.4-3Mr%�- no valgrind on sparc archesv��$]�-Kamil Dudka <kdudka@redhat.com> 7.21.4-2Mc�@- do not ignore failure of SSL handshake (upstream commit 7aa2d10)�7��#]�-Kamil Dudka <kdudka@redhat.com> 7.21.4-1M^_@- new upstream release - avoid memory leak on SSL connection failure (upstream commit a40f58d) - work around valgrind bug (#678518)���"��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.21.3-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild_��!]e-Kamil Dudka <kdudka@redhat.com> 7.21.3-2M-��- build libcurl with --enable-hidden-symbols��� _�A-Paul Howarth <paul@city-fan.org> 7.21.3-1M �@- update to 7.21.3: - added --noconfigure switch to testcurl.pl - added --xattr option - added CURLOPT_RESOLVE and --resolve - added CURLAUTH_ONLY - added version-check.pl to the examples dir - check for libcurl features for some command line options - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support - http_chunks: remove debug output - URL-parsing: consider ? a divider - SSH: avoid using the libssh2_ prefix - SSH: use libssh2_session_handshake() to work on win64 - ftp: prevent server from hanging on closed data connection when stopping a transfer before the end of the full transfer (ranges) - LDAP: detect non-binary attributes properly - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT - gnutls->handshake: improved timeout handling - security: pass the right parameter to init - krb5: use GSS_ERROR to check for error - TFTP: resend the correct data - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected - GnuTLS: now detects socket errors on Windows - symbols-in-versions: updated en masse - added a couple of examples that were missing from the tarball - Curl_send/recv_plain: return errno on failure - Curl_wait_for_resolv (for c-ares): correct timeout - ossl_connect_common: detect connection re-use - configure: prevent link errors with --librtmp - openldap: use remote port in URL passed to ldap_init_fd() - url: provide dead_connection flag in Curl_handler::disconnect - lots of compiler warning fixes - ssh: fix a download resume point calculation - fix getinfo CURLINFO_LOCAL* for reused connections - multi: the returned running handles counter could turn negative - multi: only ever consider pipelining for connections doing HTTP(S) - drop upstream patches now in tarball - update bz650255 and disable-test1112 patches to apply against new codebase - add workaround for false-positive glibc-detected buffer overflow in tftpd test server with FORTIFY_SOURCE (similar to #515361)�>�� ]�!-Kamil Dudka <kdudka@redhat.com> 7.21.2-5L�,@- do not send QUIT to a dead FTP control connection (#650255) - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed�c�� ]�k-Kamil Dudka <kdudka@redhat.com> 7.21.2-4L�7�- prevent FTP client from hanging on unrecognized ABOR response (#649347) - return more appropriate error code in case FTP server session idle timeout has exceeded (#650255)y�� ]�-Kamil Dudka <kdudka@redhat.com> 7.21.2-3Lʷ@- prevent FTP server from hanging on closed data connection (#643656)q�� _�-Paul Howarth <paul@city-fan.org> 7.21.2-2L��- enforce versioned libssh2 dependency for libcurl (#642796) b �� � ! � E � \ � � . [�w*�<�!�^�+���: � b q��J]�-Kamil Dudka <kdudka@redhat.com> 7.29.0-2Q']�- fix a SIGSEGV when closing an unused multi handle (#914411)_��I]e-Kamil Dudka <kdudka@redhat.com> 7.29.0-1QE�- new upstream release (fixes CVE-2013-0249)r��H]� -Kamil Dudka <kdudka@redhat.com> 7.28.1-3P�D�- require valgrind for build only on i386 and x86_64 (#886891)�\��G]�]-Kamil Dudka <kdudka@redhat.com> 7.28.1-2P�D�- prevent NSS from crashing on client auth hook failure - clear session cache if a client cert from file is used - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILEI��F]9-Kamil Dudka <kdudka@redhat.com> 7.28.1-1P�p�- new upstream releaseI��E]9-Kamil Dudka <kdudka@redhat.com> 7.28.0-1P��- new upstream release�)��D]�w-Kamil Dudka <kdudka@redhat.com> 7.27.0-3Pi��- use the upstream facility to disable problematic tests - do not crash if MD5 fingerprint is not provided by libssh2� ��C]�%-Kamil Dudka <kdudka@redhat.com> 7.27.0-2P@- eliminate unnecessary inotify events on upload via file protocol (#844385)I��B]9-Kamil Dudka <kdudka@redhat.com> 7.27.0-1P�@- new upstream releaser��A]� -Kamil Dudka <kdudka@redhat.com> 7.26.0-6P <�- print reason phrase from HTTP status line on error (#676596)���@��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.26.0-5P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild{��?]�-Kamil Dudka <kdudka@redhat.com> 7.26.0-4O�:�- fix duplicated SSL handshake with multi interface and proxy (#788526)c��>ai-Karsten Hopp <karsten@redhat.com> 7.26.0-3O� �- disable test 1319 on ppc64, server times out���=]�)-Kamil Dudka <kdudka@redhat.com> 7.26.0-2O�h�- use human-readable error messages provided by NSS (upstream commit 72f4b534)I��<]9-Kamil Dudka <kdudka@redhat.com> 7.26.0-1O�t@- new upstream releaseg��;aq-Karsten Hopp <karsten@redhat.com> 7.25.0-3O��A- valgrind on ppc64 works fine, disable ppc32 onlyu��:a� -Karsten Hopp <karsten@redhat.com> 7.25.0-3O��@- drop BR valgrind on PPC(64) until bugzilla #810992 gets fixed�=��9]� -Kamil Dudka <kdudka@redhat.com> 7.25.0-2O�@- use NSS_InitContext() to initialize NSS if available (#738456) - provide human-readable names for NSS errors (upstream commit a60edcc6)� ��8_�;-Paul Howarth <paul@city-fan.org> 7.25.0-1Ole�- new upstream release (#806264) - fix character encoding of docs with a patch rather than just iconv - update debug and multilib patches - don't use macros for commands - reduce size of %prep output for readability_��7]e-Kamil Dudka <kdudka@redhat.com> 7.24.0-1O �@- new upstream release (fixes CVE-2012-0036)I��6_7-Paul Howarth <paul@city-fan.org> 7.23.0-6O��- rebuild for gcc 4.7z��5]�-Kamil Dudka <kdudka@redhat.com> 7.23.0-5O�@- upstream patch that allows to run FTPS tests with nss-3.13 (#760060)d��4]o-Kamil Dudka <kdudka@redhat.com> 7.23.0-4N��@- allow to run FTPS tests with nss-3.13 (#760060)}��3]� -Kamil Dudka <kdudka@redhat.com> 7.23.0-3N�@- avoid unnecessary timeout event when waiting for 100-continue (#767490)� ��2]�%-Kamil Dudka <kdudka@redhat.com> 7.23.0-2N�=@- curl -JO now uses -O name if no C-D header comes (upstream commit c532604)S��1]M-Kamil Dudka <kdudka@redhat.com> 7.23.0-1Nå�- new upstream release (#754391)e��0]q-Kamil Dudka <kdudka@redhat.com> 7.22.0-2Nw.�- nss: select client certificates by DER (#733657)� ��/]�9-Kamil Dudka <kdudka@redhat.com> 7.22.0-1NoE�- new upstream release - curl-config now provides dummy --static-libs option (#733956){��._�-Paul Howarth <paul@city-fan.org> 7.21.7-4NP�@- actually fix SIGSEGV of curl -O -J given more than one URL (#723075)�v��-]�-Kamil Dudka <kdudka@redhat.com> 7.21.7-3NI @- fix SIGSEGV of curl -O -J given more than one URL (#723075) - introduce the --delegation option of curl (#730444) - initialize NSS with no database if the selected database is broken (#728562)i��,]y-Kamil Dudka <kdudka@redhat.com> 7.21.7-2N98@- add a new option CURLOPT_GSSAPI_DELEGATION (#719939) & I� Q � Z � s � m � ��Y�b�& m��a_-Kamil Dudka <kdudka@redhat.com> 7.29.0-25UP��- fix spurious failure of test 1500 on ppc64le (#1218272)�F��`_�/-Kamil Dudka <kdudka@redhat.com> 7.29.0-24UH��- use the default min/max TLS version provided by NSS (#1170339) - improve handling of timeouts and blocking direction to speed up FTP (#1218272)�+��__�y-Kamil Dudka <kdudka@redhat.com> 7.29.0-23U>$�- require credentials to match for NTLM re-use (CVE-2015-3143) - close Negotiate connections when done (CVE-2015-3148)j��^_y-Kamil Dudka <kdudka@redhat.com> 7.29.0-22T�q@- reject CRLFs in URLs passed to proxy (CVE-2014-8150)�T��]_�K-Kamil Dudka <kdudka@redhat.com> 7.29.0-21T���- use only full matches for hosts used as IP address in cookies (CVE-2014-3613) - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)�1��\_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-20Tw@- eliminate unnecessary delay when resolving host from /etc/hosts (#1130239) - allow to enable/disable new AES cipher-suites (#1066065) - call PR_Cleanup() on curl tool exit if NSPR is used (#1071254) - implement non-blocking TLS handshake (#1091429) - fix limited connection re-use for unencrypted HTTP (#1101092) - disable libcurl-level downgrade to SSLv3 (#1154060) - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161182) - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1166264)���[_�+-Kamil Dudka <kdudka@redhat.com> 7.29.0-19S2�@- fix connection re-use when using different log-in credentials (CVE-2014-0138)}��Za�-Paul Howarth <paul@city-fan.org> 7.29.0-18S&�- add all perl build requirements for the test suite, in a portable ways��Y_� -Kamil Dudka <kdudka@redhat.com> 7.29.0-17SK@- fix documentation of curl's options --tlsv1.[0-2] (#1066364)�|��X_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-16R��- allow to use TLS > 1.0 if built against recent NSS (#1036789) - use proxy name in error message when proxy is used (#1042831) - refresh expired cookie in test172 from upstream test-suite (#1063693)�3��W_� -Kamil Dudka <kdudka@redhat.com> 7.29.0-15R�@- allow to use ECC ciphers if NSS implements them (#1058776) - re-use of wrong HTTP NTLM connection in libcurl (CVE-2014-0015)N��Va?-Daniel Mach <dmach@redhat.com> - 7.29.0-14R�U�- Mass rebuild 2014-01-24N��Ua?-Daniel Mach <dmach@redhat.com> - 7.29.0-13R�k�- Mass rebuild 2013-12-27{��T_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-12RW�@- do not limit the speed of SCP upload on a fast connection (#1014928)���S_�'-Kamil Dudka <kdudka@redhat.com> 7.29.0-11R-�@- avoid delay if FTP is aborted in CURLOPT_HEADERFUNCTION callback (#1005686)^��R_a-Kamil Dudka <kdudka@redaht.com> 7.29.0-10R' �- avoid a busy-loop in curl_easy_perform()� ��Q]�%-Kamil Dudka <kdudka@redaht.com> 7.29.0-9R �@- FTP: when EPSV gets a 229 but fails to connect, retry with PASV (#1002815)s��P]� -Kamil Dudka <kdudka@redaht.com> 7.29.0-8Q�@- mention all option listed in 'curl --help' in curl.1 man page|��O]� -Kamil Dudka <kdudka@redhat.com> 7.29.0-7Qő�- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174)�5��N]�-Kamil Dudka <kdudka@redhat.com> 7.29.0-6Qzl@- prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173)}��M]� -Kamil Dudka <kdudka@redhat.com> 7.29.0-5Qg�@- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)�8��L]�-Kamil Dudka <kdudka@redhat.com> 7.29.0-4Q?�- do not ignore poll() failures other than EINTR (#919127) - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)�2��K]� -Kamil Dudka <kdudka@redhat.com> 7.29.0-3Q7/�- switch SSL socket into non-blocking mode after handshake (#960765) - drop the hide_selinux.c hack no longer needed in %check @ �{ � � � � @ � &�8�R�}>�6�@ u��wc� -Kamil Dudka <kdudka@redhat.com> - 7.29.0-47Z�<�- make NSS deallocate PKCS #11 objects early enough (#1510247)y��vc�-Kamil Dudka <kdudka@redhat.com> - 7.29.0-46Z.s@- reset authentication state when HTTP transfer is done (#1511523)���uc�'-Kamil Dudka <kdudka@redhat.com> - 7.29.0-45Y��- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257){��t_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-44Y�o@- drop 0109-curl-7.29.0-crl-valgrind.patch no longer needed (#1427883)�:��s_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-43Y� �- curl --socks5-{basic,gssapi}: control socks5 auth (#1409208) - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883) - nss: do not leak PKCS #11 slot while loading a key (#1444860) - nss: fix a possible use-after-free in SelectClientCert() (#1473158)k��r_{-Kamil Dudka <kdudka@redhat.com> 7.29.0-42Xۡ�- fix use of uninitialized variable detected by Covscanb��q_i-Kamil Dudka <kdudka@redhat.com> 7.29.0-41Xۡ�- make FTPS work with --proxytunnel (#1420327)b��p_i-Kamil Dudka <kdudka@redhat.com> 7.29.0-40X��- make FTPS work with --proxytunnel (#1420327)|��o_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-39X���- work around race condition in PK11_FindSlotByName() in NSS (#1404815)b��n_i-Kamil Dudka <kdudka@redhat.com> 7.29.0-38X�Y�- make FTPS work with --proxytunnel (#1420327)���m_�)-Kamil Dudka <kdudka@redhat.com> 7.29.0-37W�<�- fix tight loop in non-blocking TLS handhsake over proxy (#1388162) - handle cookies with numerical IPv6 address (#1341503) - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740) - curl -E: allow to escape ':' in cert nickname (#1376062) - run automake in %prep to avoid patching Makefile.in files from now on��l_�!-Kamil Dudka <kdudka@redhat.com> 7.29.0-36W�$�- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)���k_�G-Kamil Dudka <kdudka@redhat.com> 7.29.0-35W�/@- fix incorrect use of a previously loaded certificate from file (related to CVE-2016-5420)�"��j_�g-Kamil Dudka <kdudka@redhat.com> 7.29.0-34W�Q�- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option (required by the fix for CVE-2016-5419)�6��i_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-33W�h�- fix re-using connections with wrong client cert (CVE-2016-5420) - fix TLS session resumption client cert bypass (CVE-2016-5419)o��h_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-32Wg�- configure: improve detection of GCC's -fvisibility= flagq��g_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-31Wg�- prevent curl_multi_wait() from missing an event (#1347904)z��f_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-30V�@- curl.1: --disable-{eprt,epsv} are ignored for IPv6 hosts (#1305974)w��e_�-Kamil Dudka <kdudka@redhat.com> 7.29.0-29V��@- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1275769)�s��d_� -Kamil Dudka <kdudka@redhat.com> 7.29.0-28V7P@- prevent NSS from incorrectly re-using a session (#1269855) - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324) - disable unreliable upstream test-case 2032 (#1241168)}��c_� -Kamil Dudka <kdudka@redhat.com> 7.29.0-27V/g@- SSH: do not require public key file for user authentication (#1275769)���b_�!-Kamil Dudka <kdudka@redhat.com> 7.29.0-26U��- implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318) - improve parsing of URL-encoded user name and password (#1260178) - prevent test46 from failing due to expired cookie (#1258834) S � � � T � E � k��n�B�c�uA��\�d�� � � S ]��Ey.Tim Powers <timp@redhat.com>:Te�- fixed mising ldconfigs - updated to 7.5.2, bug fixes9��E1.Tim Powers <timp@redhat.com>:4��- updated to 7.5.1�6��E�).Tim Powers <timp@redhat.com>:�@- update to 7.4.1 to fix bug #20337, problems with curl -c - not using patch anymore, it's included in the new source. Keeping for referenceN��QO.Nalin Dahyabhai <nalin@redhat.com>9�3�- fix bogus req in -devel packageb��E�.Tim Powers <timp@redhat.com>9�3�- devel package needed defattr so that root owns the files{��Q�'.Nalin Dahyabhai <nalin@redhat.com>9��- update to 7.3 - apply vsprintf/vsnprintf patch from Colin Phipps via Debianu��Q�.Nalin Dahyabhai <nalin@redhat.com>9��- enable SSL support - fix packager tag - move buildroot to %{_tmppath}H��EO.Tim Powers <timp@redhat.com>9���- fixed vendor tag for bug #150286�� Q .Prospector <prospector@redhat.com>9|/�- rebuilt[�� Eu.Tim Powers <timp@redhat.com>9k @- workaround alpha build problems with optimizations0�� E .Tim Powers <timp@redhat.com>9i��- rebuiltZ�� Es.Tim Powers <timp@redhat.com>9;�@- put man pages in correct place - use %makeinstall9�� E1.Tim Powers <timp@redhat.com>97@- updated to 6.5.2O��E].Tim Powers <timp@redhat.com>8 #�- updated sources to 6.2 - gzip man page6��E+.Tim Powers <timp@redhat.com>7�r@- changed group� ��E�}.Tim Powers <timp@redhat.com>7�,@- changelog started - general cleanups, changed prefix to /usr, added manpage to files section - including in Powertools�-����I-Pavel Mayorov <pmayorov@cloudlinux.com> - 7.29.0-59.1.tuxcare.els1e%<�- CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificatesv��s}-Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�'-Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�%-Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��cq-Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�� c�-Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��cq-Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��~cu-Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��}c�-Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��|c�1-Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���{c�+-Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)� ��zc�W-Kamil Dudka <kdudka@redhat.com> - 7.29.0-50[ @- remove dead code, detected by Coverity Analysis - remove unused variable, detected by GCC and Clangi��ycs-Kamil Dudka <kdudka@redhat.com> - 7.29.0-49[�- make curl --speed-limit work with TFTP (#1584750)���xc�;-Kamil Dudka <kdudka@redhat.com> - 7.29.0-48[�@- fix RTSP bad headers buffer over-read (CVE-2018-1000301) - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120) - fix LDAP NULL pointer dereference (CVE-2018-1000121) - fix RTSP RTP buffer over-read (CVE-2018-1000122) - http: prevent custom Authorization headers in redirects (CVE-2018-1000007) - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256) - update certificates in the test-suite because they expire soon (#1572723) * | �a �% � � P � / � � g ) � � h 4��S �H��&�o��p9��5�e | �d��?a�i.Adrian Havill <havill@redhat.com> 7.12.1-1Ac�@- upgrade to 7.12.1 - enable GSSAPI auth (#129353) - enable I18N domain names (#134595) - workaround for broken ProFTPD SSL auth (#134133). Thanks to Aleksandar Milivojevice��>am.Adrian Havill <havill@redhat.com> 7.12.0-4AZ��- move new docs position so defattr gets appliedc��=cg.Warren Togami <wtogami@redhat.com> 7.12.0-3AX �- remove INSTALL, move libcurl docs to -develT��<M_.Jindrich Novy <jnovy@redhat.com>A�@- updated to 7.12.0 - updated nousr patch3��;K .Elliot Lee <sopwith@redhat.com>@��- rebuiltq��:a�.Adrian Havill <havill@redhat.com> 7.11.1-1@s�@- upgraded; updated nousr patch - added COPYING (#115956) -3��9K .Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��8K .Elliot Lee <sopwith@redhat.com>@,�@- rebuiltk��7eu.Florian La Roche <Florian.LaRoche@redhat.de>@��- update to 7.10.8 - remove patch2, already upstream�B��6a�%.Adrian Havill <havill@redhat.com> 7.10.6-7?�6�- aclocal before libtoolize - move OpenLDAP license so it's present as a doc file, present in both the source and binary as per conditions� ��5a�;.Adrian Havill <havill@redhat.com> 7.10.6-6?���- add OpenLDAP copyright notice for usage of code, add OpenLDAP license for this codec��4ai.Adrian Havill <havill@redhat.com> 7.10.6-5?���- match serverAltName certs with SSL (#106168)L��3e7.Adrian Havill <havill@redhat.com> 7.10.6-4.1?f�A- bump n-v-r for RHEL� ��2a�;.Adrian Havill <havill@redhat.com> 7.10.6-4?f�@- restore ca cert bundle (#104400) - require openssl, we want to use its ca-cert bundle:��1Y .Joe Orton <jorton@redhat.com> 7.10.6-3?[ �- rebuildN��0]C.Joe Orton <jorton@redhat.com> 7.10.6-2.2?Xz�- fix to include libcurl.soL��/e7.Adrian Havill <havill@redhat.com> 7.10.6-2.1?I�A- bump n-v-r for RHELn��.a.Adrian Havill <havill@redhat.com> 7.10.6-2?I�@- devel subpkg needs openssl-devel as a Require (#102963)E��-a-.Adrian Havill <havill@redhat.com> 7.10.6-1?%@- bumped versionE��,a-.Adrian Havill <havill@redhat.com> 7.10.5-1?w�- bumped version3��+K .Elliot Lee <sopwith@redhat.com>>��@- rebuilt]��*eY.Florian La Roche <Florian.LaRoche@redhat.de>>���- update to 7.10.4 - adapt nousr patch0��)E .Tim Powers <timp@redhat.com>>.��- rebuilte��(Ww.Joe Orton <jorton@redhat.com> 7.9.8-4>-6@- don't add -L/usr/lib to 'curl-config --libs' output>��'a .Nalin Dahyabhai <nalin@redhat.com> 7.9.8-3>�@- rebuild�B��&W�/.Joe Orton <jorton@redhat.com> 7.9.8-2=�@- fix `curl-config --libs` output for libdir!=/usr/lib - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la - libtoolize and reconfK��%k/.Trond Eivind Glomsrød <teg@redhat.com> 7.9.8-1=;�- 7.9.8 (# 69473):��$E3.Tim Powers <timp@redhat.com>=@- automated rebuild:��#E3.Tim Powers <timp@redhat.com><��@- automated rebuildA��"k.Trond Eivind Glomsrød <teg@redhat.com> 7.9.7-1<�@- 7.9.7A��!k.Trond Eivind Glomsrød <teg@redhat.com> 7.9.6-1<ƞ@- 7.9.6��� k�7.Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-2<��@- Stop the curl-config script from printing -I/usr/include and -L/usr/lib (#59497)A�� k.Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-1<���- 7.9.5C�� k .Trond Eivind Glomsrød <teg@redhat.com> 7.9.3-2<{x�- RebuildF�� a/.Nalin Dahyabhai <nalin@redhat.com> 7.9.3-1<N��- update to 7.9.3B�� U3.Tim Powers <timp@redhat.com> 7.9.2-2<<0�- automated rebuildA��k.Trond Eivind Glomsrød <teg@redhat.com> 7.9.2-1<<0�- 7.9.2� ��Q�q.Nalin Dahyabhai <nalin@redhat.com>;}@- include curl-config in curl-devel - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurlR��]K.Crutcher Dunnavant <crutcher@redhat.com>;Uz@- added openssl-devel build req=��E9.Tim Powers <timp@redhat.com>; @- built for the distroO��G[.Jeff Johnson <jbj@redhat.com>:�j�- upgrade to curl-7.7.2. - enable IPv6.H��EO.Tim Powers <timp@redhat.com>:��@- rebuilt against openssl-0.9.6-1 !" $�J � � 1 � I � � h � � c � ��g�b����M��!��" u��`_� .Jindrich Novy <jnovy@redhat.com> 7.16.2-5Fvs�- don't print like crazy (#236981), backported from upstream CVS�o��__�.Jindrich Novy <jnovy@redhat.com> 7.16.2-4Fr@- another series of review fixes (#225671), thanks to Paul Howarth - check version of ldap library automatically - don't use %makeinstall and preserve timestamps - drop useless patches� ��^_�=.Jindrich Novy <jnovy@redhat.com> 7.16.2-3FDZ�- add automake BR to curl-devel to fix aclocal dir. ownership, thanks to Patrice Dumasx��]_�.Jindrich Novy <jnovy@redhat.com> 7.16.2-2FC @- package libcurl.m4 in curl-devel (#239664), thanks to Quy TonthatF��\_1.Jindrich Novy <jnovy@redhat.com> 7.16.2-1F �- update to 7.16.2b��[_i.Jindrich Novy <jnovy@redhat.com> 7.16.1-3Eّ@- don't create/ship static libraries (#225671)_��Z_c.Jindrich Novy <jnovy@redhat.com> 7.16.1-2E� @- merge review related spec fixes (#225671)F��Y_1.Jindrich Novy <jnovy@redhat.com> 7.16.1-1E��- update to 7.16.1���X_�3.Jindrich Novy <jnovy@redhat.com> 7.16.0-5E��@- don't package generated makefiles for docs/examples to avoid multilib conflicts���W_�+.Jindrich Novy <jnovy@redhat.com> 7.16.0-4E���- convert spec to UTF-8 - don't delete BuildRoot in %prep phase - rpmlint fixes���Va�M.Jindrich Novy <jnovy@redhat.com> -7.16.0-3E\R�- prevent curl from dlopen()ing missing ldap libraries so that ldap:// requests work (#215928)�2��Uc�.Jindrich Novy <jnovy@redhat.com> - 7.16.0-2EG:�- fix BuildRoot - add Requires: pkgconfig for curl-devel - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)M��Tc;.Jindrich Novy <jnovy@redhat.com> - 7.16.0-1EE�@- update to curl-7.16.0`��SkY.Jindrich Novy <jnovy@redhat.com> - 7.15.5-1.fc6D�- update to curl-7.15.5 - use %{?dist}L��Rk1.Ivana Varekova <varekova@redhat.com> - 7.15.4-1D�@- update to 7.15.4u��Qk�.Ivana Varekova <varekova@redhat.com> - 7.15.3-1D �@- fix multilib problem using pkg-config - update to 7.15.3� ��Pk�W.Ivana Varekova <varekova@redhat.com> - 7.15.1-2C���- fix multilib problem - #181290 - curl-devel.i386 not installable together with curl-devel.x86-64h��Oqc.Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2.1C�@- bump again for double-long bug on ppc(64)n��Nms.Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��MS .Jesse Keating <jkeating@redhat.com>C�q�- rebuiltW��LgK.Ivana Varekova <varekova@redhat.com> 7.15.1-1C� @- update to 7.15.1 (bug 175191)k��Kgs.Ivana Varekova <varekova@redhat.com> 7.15.0-3C��@- fix curl-config bug 174556 - missing vernum valueA��Jg .Ivana Varekova <varekova@redhat.com> 7.15.0-2Cq�- rebuiltJ��Ig1.Ivana Varekova <varekova@redhat.com> 7.15.0-1CT�- update to 7.15.0J��Hg1.Ivana Varekova <varekova@redhat.com> 7.14.1-1CNL@- update to 7.14.1M��Gg7.Ivana Varekova <varekova@redhat.com> 7.14.0-1B�i�- rebuild new version���Fg�?.Ivana Varekova <varekova@redhat.com> 7.13.1-3Bwg�- fix bug 150768 - curl-7.12.3-2 breaks basic authentication used Daniel Stenberg patchu��EY�.Joe Orton <jorton@redhat.com> 7.13.1-2Bl�- update to use ca-bundle in /etc/pki - mark License as MIT not MPLJ��Dg1.Ivana Varekova <varekova@redhat.com> 7.13.1-1B.�@- rebuilt (7.13.1)N��CYG.Tomas Mraz <tmraz@redhat.com> 7.13.0-2B$Y@- rebuild with openssl-0.9.7e8��BW .Florian La Roche <laroche@redhat.com>BA@- 7.13.0���AY�[.Joe Orton <jorton@redhat.com> 7.12.3-3B �@- don't pass /usr to --with-libidn to remove "-L/usr/lib" from 'curl-config --libs' output on x86_64.�W��@a�O.Adrian Havill <havill@redhat.com> 7.12.3-1A�)@- Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794) - require libidn-devel for devel subpkg (#141341) - remove proftpd kludge; included upstream B �z � J k � � < j��.� �,�[��: � B y��|_�.Jindrich Novy <jnovy@redhat.com> 7.18.2-7H�e@- update the thread safety patch, thanks to Rob Crittenden (#462217)w��{c� .Warren Togami <wtogami@redhat.com> 7.18.2-6H�|@- add thread safety to libcurl NSS cleanup() functions (#459297)U��zq=.Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-5H��@- undo mini libcurl.so.3f��yq_.Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-4H�)�- make miniature library for libcurl.so.3Z��x_Y.Jindrich Novy <jnovy@redhat.com> 7.18.2-3Hn�- enable support for libssh2 (#453958)���w_�'.Jindrich Novy <jnovy@redhat.com> 7.18.2-2HX��- fix curl_multi_perform() over a proxy (#450140), thanks to Rob CrittendenF��v_1.Jindrich Novy <jnovy@redhat.com> 7.18.2-1HF��- update to 7.18.2�e��u_�m.Jindrich Novy <jnovy@redhat.com> 7.18.1-2H!��- spec cleanup, thanks to Paul Howarth (#225671) - drop BR: libtool - convert CHANGES and README to UTF-8 - _GNU_SOURCE in CFLAGS is no more needed - remove bogus rpath�v��t_�.Jindrich Novy <jnovy@redhat.com> 7.18.1-1G��@- update to curl 7.18.1 (fixes #397911) - add ABI docs for libcurl - remove --static-libs from curl-config - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf substitution (#432667)t��s_� .Jindrich Novy <jnovy@redhat.com> 7.18.0-2G�~�- define _GNU_SOURCE so that NI_MAXHOST gets defined from glibc���r_�?.Jindrich Novy <jnovy@redhat.com> 7.18.0-1G��- update to curl-7.18.0 - drop sslgen patch -> applied upstream - fix typo in description���q_�/.Jindrich Novy <jnovy@redhat.com> 7.17.1-6G��- fix curl-devel obsoletes so that we don't break F8->F9 upgrade path (#429612)���p_�'.Jindrich Novy <jnovy@redhat.com> 7.17.1-5G�e�- do not attempt to close a bad socket (#427966), thanks to Caolan McNamara|��o_�.Jindrich Novy <jnovy@redhat.com> 7.17.1-4GUA@- rebuild because of the openldap soname bump - remove old nsspem patch�5��n_� .Jindrich Novy <jnovy@redhat.com> 7.17.1-3GO�@- drop useless ldap library detection since curl doesn't dlopen()s it but links to it -> BR: openldap-devel - enable LDAPS support (#225671), thanks to Paul Howarth - BR: krb5-devel to reenable GSSAPI support - simplify build process - update description~��m_� .Jindrich Novy <jnovy@redhat.com> 7.17.1-2GD �- update description to contain complete supported servers list (#393861)�M��l_�=.Jindrich Novy <jnovy@redhat.com> 7.17.1-1G>�- update to curl 7.17.1 - include patch to enable SSL usage in NSS when a socket is opened nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)f��kao.Jindrich Novy <jnovy@redhat.com> 7.16.4-10G 3�- correctly provide/obsolete curl-devel (#130251)l��j_}.Jindrich Novy <jnovy@redhat.com> 7.16.4-9G 3�- create libcurl and libcurl-devel subpackages (#130251)z��i_�.Jindrich Novy <jnovy@redhat.com> 7.16.4-8G@- list features correctly when curl is compiled against NSS (#316191)~��h_� .Jindrich Novy <jnovy@redhat.com> 7.16.4-7F�l@- add zlib-devel BR to enable gzip compressed transfers in curl (#292211)Q��g_G.Jindrich Novy <jnovy@redhat.com> 7.16.4-6F�1�- provide webclient (#225671)�Z��f_�W.Jindrich Novy <jnovy@redhat.com> 7.16.4-5F��- add support for the NSS PKCS#11 pem reader so the command-line is the same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com) - switch to NSS againZ��e_Y.Jindrich Novy <jnovy@redhat.com> 7.16.4-4F�@- revert back to use OpenSSL (#266021)X��d_U.Jindrich Novy <jnovy@redhat.com> 7.16.4-3FҼ�- don't use openssl, use nss insteadr��c_�.Jindrich Novy <jnovy@redhat.com> 7.16.4-2F�S@- fix anonymous ftp login (#251570), thanks to David CantrellF��b_1.Jindrich Novy <jnovy@redhat.com> 7.16.4-1F��@- update to 7.16.4�7��a_�.Jindrich Novy <jnovy@redhat.com> 7.16.3-1F�@- update to 7.16.3 - drop .print patch, applied upstream - next series of merge review fixes by Paul Howarth - remove aclocal stuff, no more needed - simplify makefile arguments - don't reference standard library paths in libcurl.pc - include docs/CONTRIBUTE � �*� � ; � 2 � m � r ~���2�F��D�� � ���]�Y.Kamil Dudka <kdudka@redhat.com> 7.19.6-3J��@- avoid tight loop during a sftp upload - http://permalink.gmane.org/gmane.comp.web.curl.library/24744k��]}.Kamil Dudka <kdudka@redhat.com> 7.19.6-2J���- let curl package depend on the same version of libcurl�T��]�M.Kamil Dudka <kdudka@redhat.com> 7.19.6-1J�Q�- new upstream release, dropped applied patches - changed NSS code to not ignore the value of ssl.verifyhost and produce more verbose error messages (#516056)a��k[.Ville Skyttä <ville.skytta@iki.fi> - 7.19.5-10J���- Use lzma compressed upstream tarball.�����.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.5-9Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild�^��]�a.Kamil Dudka <kdudka@redhat.com> 7.19.5-8Jf�@- do not pre-login to all PKCS11 slots, it causes problems with HW tokens - try to select client certificate automatically when not specified, thanks to Claes Jakobsson��]�#.Kamil Dudka <kdudka@redhat.com> 7.19.5-7JW-@- fix SIGSEGV when using NSS client certificates, thanks to Claes Jakobsson|��]� .Kamil Dudka <kdudka@redhat.com> 7.19.5-6JP��- force test suite to use the just built libcurl, thanks to Paul Howarthh��]w.Kamil Dudka <kdudka@redhat.com> 7.19.5-5JL�@- run test suite after build - enable built-in manualc��]m.Kamil Dudka <kdudka@redhat.com> 7.19.5-4JBA- fix bug introduced by the last build (#504857)d��]o.Kamil Dudka <kdudka@redhat.com> 7.19.5-3JB@- exclude curlbuild.h content from spec (#504857)��� ]�).Kamil Dudka <kdudka@redhat.com> 7.19.5-2J/�@- avoid unguarded comparison in the spec file, thanks to R P Herrold (#504857)^�� ]c.Kamil Dudka <kdudka@redhat.com> 7.19.5-1J�@- update to 7.19.5, dropped applied patches��� _�A.Kamil Dudka <kdudka@redhat.com> 7.19.4-11J@- fix infinite loop while loading a private key, thanks to Michael Cronenworth (#453612)��� _�E.Kamil Dudka <kdudka@redhat.com> 7.19.4-10I��@- fix curl/nss memory leaks while using client certificate (#453612, accepted by upstream)Z�� ][.Kamil Dudka <kdudka@redhat.com> 7.19.4-9I��- add missing BuildRequire for autoconfk��]}.Kamil Dudka <kdudka@redhat.com> 7.19.4-8I��- fix configure.ac to not discard -g in CFLAGS (#496778)���k�%.Debarshi Ray <rishi@fedoraproject.org> 7.19.4-7I�@- Fixed configure to respect the environment's CFLAGS and CPPFLAGS settings.�.��]�.Kamil Dudka <kdudka@redhat.com> 7.19.4-6I�z�- upstream patch fixing memory leak in lib/nss.c (#453612) - remove redundant dependency of libcurl-devel on libssh2-devel���]�5.Kamil Dudka <kdudka@redhat.com> 7.19.4-5I��@- enable 6 additional crypto algorithms by default (#436781, accepted by upstream)� ��]�%.Kamil Dudka <kdudka@redhat.com> 7.19.4-4I��@- fix memory leak in src/main.c (accepted by upstream) - avoid using %ifarchd��]o.Kamil Dudka <kdudka@redhat.com> 7.19.4-3I���- make libcurl-devel multilib-ready (bug #488922)� ��_�[.Jindrich Novy <jnovy@redhat.com> 7.19.4-2I�@- drop .easy-leak patch, causes problems in pycurl (#488791) - fix libcurl-devel dependencies (#488895)�>��_� .Jindrich Novy <jnovy@redhat.com> 7.19.4-1I��- update to 7.19.4 (fixes CVE-2009-0037) - fix leak in curl_easy* functions, thanks to Kamil Dudka - drop nss-fix patch, applied upstream��� ��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��]�;.Kamil Dudka <kdudka@redhat.com> 7.19.3-1I���- update to 7.19.3, dropped applied nss patches - add patch fixing 7.19.3 curl/nss bugs]��~__.Jindrich Novy <jnovy@redhat.com> 7.18.2-9IFF�- rebuild for f10/rawhide cvs tag clashesq��}_�.Jindrich Novy <jnovy@redhat.com> 7.18.2-8I:i@- use improved NSS patch, thanks to Rob Crittenden (#472489) q %�Q � � ' � a � � � � � �u �:�u1���/ q �9��5]�.Kamil Dudka <kdudka@redhat.com> 7.20.1-4K��@- upstream patch preventing failure of test536 with threaded DNS resolver - upstream patch preventing SSL handshake timeout underflow�7��4_�.Paul Howarth <paul@city-fan.org> 7.20.1-3K�:@- replace Rawhide s390-sleep patch with a more targeted patch adding a delay after tests 513 and 514 rather than after all tests���3]�I.Kamil Dudka <kdudka@redhat.com> 7.20.1-2K��- experimentally enabled threaded DNS lookup - make curl-config multilib ready again (#584107)I��2]9.Kamil Dudka <kdudka@redhat.com> 7.20.1-1K�E�- new upstream release^��1]c.Kamil Dudka <kdudka@redhat.com> 7.20.0-4K��@- add missing quote in libcurl.m4 (#576252)�X��0]�U.Kamil Dudka <kdudka@redhat.com> 7.20.0-3K�g@- throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972) - valgrind temporarily disabled (#574889) - kerberos installation prefix has been changedc��/]m.Kamil Dudka <kdudka@redhat.com> 7.20.0-2K��- exclude test1112 from the test suite (#565305)� ��.]�c.Kamil Dudka <kdudka@redhat.com> 7.20.0-1Ks�@- new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP - dropped patches applied upstream - dropped curl-7.16.0-privlibs.patch no longer useful - a new patch forcing -lrt when linking the curl tool and test-cases� ��-_�[.Kamil Dudka <kdudka@redhat.com> 7.19.7-11Kb�- upstream patch adding a new option -J/--remote-header-name - dropped temporary workaround for #545779Q��,eA.Chris Weyl <cweyl@alumni.drew.edu> 7.19.7-10KO@- bump for libssh2 rebuildx��+]�.Kamil Dudka <kdudka@redhat.com> 7.19.7-9K.�- temporary workaround for #548269 (restored behavior of 7.19.7-4)f��*]s.Kamil Dudka <kdudka@redhat.com> 7.19.7-8K �A- replace hard wired port numbers in the test suite���)]�A.Kamil Dudka <kdudka@redhat.com> 7.19.7-7K �@- use different port numbers for 32bit and 64bit builds - temporary workaround for #545779z��(]�.Kamil Dudka <kdudka@redhat.com> 7.19.7-6K ?�- make it possible to run test241 - re-enable SCP/SFTP tests (#539444)� ��']�7.Kamil Dudka <kdudka@redhat.com> 7.19.7-5KK@- avoid use of uninitialized value in lib/nss.c - suppress failure of test513 on s390���&]�M.Kamil Dudka <kdudka@redhat.com> 7.19.7-4K@- do not require valgrind on s390 and s390x - temporarily disabled SCP/SFTP test-suite (#539444)�R��%]�I.Kamil Dudka <kdudka@redhat.com> 7.19.7-3J���- fix crash on doubly closed NSPR descriptor, patch contributed by Kevin Baughman (#534176) - new version of patch for broken TLS servers (#525496, #527771)[��$]].Kamil Dudka <kdudka@redhat.com> 7.19.7-2J�l�- increased release number (CVS problem)���#]�Y.Kamil Dudka <kdudka@redhat.com> 7.19.7-1J�l�- new upstream release, dropped applied patches - workaround for broken TLS servers (#525496, #527771)j��"_y.Kamil Dudka <kdudka@redhat.com> 7.19.6-13Jս@- fix timeout issues and gcc warnings within lib/nss.cm��!_.Kamil Dudka <kdudka@redhat.com> 7.19.6-12J�1@- upstream patch for NSS support written by Guenter Knaufa�� _g.Kamil Dudka <kdudka@redhat.com> 7.19.6-11J�H@- build libcurl with c-ares support (#514771)]�� __.Kamil Dudka <kdudka@redhat.com> 7.19.6-10J�S�- require libssh2>=1.2 properly (#525002)w�� ]�.Kamil Dudka <kdudka@redhat.com> 7.19.6-9J�@- let curl test-suite use valgrind - require libssh2>=1.2 (#525002)Q�� g?.Chris Weyl <cweyl@alumni.drew.edu> - 7.19.6-8J�j�- rebuild for libssh2 1.2V�� ]S.Kamil Dudka <kdudka@redhat.com> 7.19.6-7J�$�- make curl test-suite more verboseh��]w.Kamil Dudka <kdudka@redhat.com> 7.19.6-6J��@- update polling patch to the latest upstream versiond��]o.Kamil Dudka <kdudka@redhat.com> 7.19.6-5J���- cover ssh and stunnel support by the test-suite�V��]�Q.Kamil Dudka <kdudka@redhat.com> 7.19.6-4J�^@- use pkg-config to find nss and libssh2 if possible - better patch (not only) for SCP/SFTP polling - improve error message for not matching common name (#516056) � .� � � H � � � 0�Z�h�� �>��E]�!.Kamil Dudka <kdudka@redhat.com> 7.21.2-5L�,@- do not send QUIT to a dead FTP control connection (#650255) - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed�c��D]�k.Kamil Dudka <kdudka@redhat.com> 7.21.2-4L�7�- prevent FTP client from hanging on unrecognized ABOR response (#649347) - return more appropriate error code in case FTP server session idle timeout has exceeded (#650255)y��C]�.Kamil Dudka <kdudka@redhat.com> 7.21.2-3Lʷ@- prevent FTP server from hanging on closed data connection (#643656)q��B_�.Paul Howarth <paul@city-fan.org> 7.21.2-2L��- enforce versioned libssh2 dependency for libcurl (#642796)���A]�K.Kamil Dudka <kdudka@redhat.com> 7.21.2-1L��@- new upstream release, drop applied patches - make 0102-curl-7.21.2-debug.patch less intrusive:��@3E.jkeating - 7.21.1-6L�*@- Rebuilt for gcc bug 634757p��?]�.Kamil Dudka <kdudka@redhat.com> 7.21.1-5L�o@- make it possible to run SCP/SFTP tests on x86_64 (#632914)k��>]}.Kamil Dudka <kdudka@redhat.com> 7.21.1-4L�)@- work around glibc/valgrind problem on x86_64 (#631449)�~��=_� .Paul Howarth <paul@city-fan.org> 7.21.1-3Ls�@- fix up patches so there's no need to run autotools in the rpm build - drop buildreq automake - drop dependency on automake for devel package from F-14, where %{_datadir}/aclocal is included in the filesystem package - drop dependency on pkgconfig for devel package from F-11, where pkgconfig dependencies are auto-generated�`��<]�e.Kamil Dudka <kdudka@redhat.com> 7.21.1-2Lrb�- re-enable test575 on s390(x), already fixed (upstream commit d63bdba) - modify system headers to work around gcc bug (#617757) - curl -T now ignores file size of special files (#622520) - fix kerberos proxy authentication for https (#625676) - work around glibc/valgrind problem on x86_64 (#626470)I��;]9.Kamil Dudka <kdudka@redhat.com> 7.21.1-1Lc�@- new upstream releaseM��:WG.Dan Horák <dan[at]danny.cz> 7.21.0-3L;�- disable test 575 on s390(x)b��9]k.Kamil Dudka <kdudka@redhat.com> 7.21.0-2L(��- add support for NTLM authentication (#603783)�5��8]�.Kamil Dudka <kdudka@redhat.com> 7.21.0-1L��- new upstream release, drop applied patches - update of %description - disable valgrind for certain test-cases (libssh2 problem)q��7]�.Kamil Dudka <kdudka@redhat.com> 7.20.1-6K���- fix -J/--remote-header-name to strip CR-LF (upstream patch)�M��6]�?.Kamil Dudka <kdudka@redhat.com> 7.20.1-5K�#@- CRL support now works again (#581926) - make it possible to start a testing OpenSSH server when building with SELinux in the enforcing mode (#521087) ; ���1�b�@�}��3 � ; e��V]q.Kamil Dudka <kdudka@redhat.com> 7.22.0-2Nw.�- nss: select client certificates by DER (#733657)� ��U]�9.Kamil Dudka <kdudka@redhat.com> 7.22.0-1NoE�- new upstream release - curl-config now provides dummy --static-libs option (#733956){��T_�.Paul Howarth <paul@city-fan.org> 7.21.7-4NP�@- actually fix SIGSEGV of curl -O -J given more than one URL (#723075)�v��S]�.Kamil Dudka <kdudka@redhat.com> 7.21.7-3NI @- fix SIGSEGV of curl -O -J given more than one URL (#723075) - introduce the --delegation option of curl (#730444) - initialize NSS with no database if the selected database is broken (#728562)i��R]y.Kamil Dudka <kdudka@redhat.com> 7.21.7-2N98@- add a new option CURLOPT_GSSAPI_DELEGATION (#719939)_��Q]e.Kamil Dudka <kdudka@redhat.com> 7.21.7-1N*�- new upstream release (fixes CVE-2011-2192)q��P]�.Kamil Dudka <kdudka@redhat.com> 7.21.6-2M�d@- avoid an invalid timeout event on a reused handle (#679709)J��O_9.Paul Howarth <paul@city-fan.org> 7.21.6-1M��@- new upstream releasew��N]�.Kamil Dudka <kdudka@redhat.com> 7.21.5-2M�'�- fix the output of curl-config --version (upstream commit 82ecc85)I��M]9.Kamil Dudka <kdudka@redhat.com> 7.21.5-1M�'�- new upstream releaseV��LiG.Peter Robinson <pbrobinson@gmail.com> 7.21.4-4M���- no valgrind on ARMv5 archesQ��K_G.Dennis Gilmore <dennis@ausil.us> 7.21.4-3Mr%�- no valgrind on sparc archesv��J]�.Kamil Dudka <kdudka@redhat.com> 7.21.4-2Mc�@- do not ignore failure of SSL handshake (upstream commit 7aa2d10)�7��I]�.Kamil Dudka <kdudka@redhat.com> 7.21.4-1M^_@- new upstream release - avoid memory leak on SSL connection failure (upstream commit a40f58d) - work around valgrind bug (#678518)���H��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.21.3-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild_��G]e.Kamil Dudka <kdudka@redhat.com> 7.21.3-2M-��- build libcurl with --enable-hidden-symbols���F_�A.Paul Howarth <paul@city-fan.org> 7.21.3-1M �@- update to 7.21.3: - added --noconfigure switch to testcurl.pl - added --xattr option - added CURLOPT_RESOLVE and --resolve - added CURLAUTH_ONLY - added version-check.pl to the examples dir - check for libcurl features for some command line options - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support - http_chunks: remove debug output - URL-parsing: consider ? a divider - SSH: avoid using the libssh2_ prefix - SSH: use libssh2_session_handshake() to work on win64 - ftp: prevent server from hanging on closed data connection when stopping a transfer before the end of the full transfer (ranges) - LDAP: detect non-binary attributes properly - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT - gnutls->handshake: improved timeout handling - security: pass the right parameter to init - krb5: use GSS_ERROR to check for error - TFTP: resend the correct data - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected - GnuTLS: now detects socket errors on Windows - symbols-in-versions: updated en masse - added a couple of examples that were missing from the tarball - Curl_send/recv_plain: return errno on failure - Curl_wait_for_resolv (for c-ares): correct timeout - ossl_connect_common: detect connection re-use - configure: prevent link errors with --librtmp - openldap: use remote port in URL passed to ldap_init_fd() - url: provide dead_connection flag in Curl_handler::disconnect - lots of compiler warning fixes - ssh: fix a download resume point calculation - fix getinfo CURLINFO_LOCAL* for reused connections - multi: the returned running handles counter could turn negative - multi: only ever consider pipelining for connections doing HTTP(S) - drop upstream patches now in tarball - update bz650255 and disable-test1112 patches to apply against new codebase - add workaround for false-positive glibc-detected buffer overflow in tftpd test server with FORTIFY_SOURCE (similar to #515361) � �$�; � p � : � V � � �=� �p��A��L � �5��t]�.Kamil Dudka <kdudka@redhat.com> 7.29.0-6Qzl@- prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173)}��s]� .Kamil Dudka <kdudka@redhat.com> 7.29.0-5Qg�@- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)�8��r]�.Kamil Dudka <kdudka@redhat.com> 7.29.0-4Q?�- do not ignore poll() failures other than EINTR (#919127) - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)�2��q]� .Kamil Dudka <kdudka@redhat.com> 7.29.0-3Q7/�- switch SSL socket into non-blocking mode after handshake (#960765) - drop the hide_selinux.c hack no longer needed in %checkq��p]�.Kamil Dudka <kdudka@redhat.com> 7.29.0-2Q']�- fix a SIGSEGV when closing an unused multi handle (#914411)_��o]e.Kamil Dudka <kdudka@redhat.com> 7.29.0-1QE�- new upstream release (fixes CVE-2013-0249)r��n]� .Kamil Dudka <kdudka@redhat.com> 7.28.1-3P�D�- require valgrind for build only on i386 and x86_64 (#886891)�\��m]�].Kamil Dudka <kdudka@redhat.com> 7.28.1-2P�D�- prevent NSS from crashing on client auth hook failure - clear session cache if a client cert from file is used - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILEI��l]9.Kamil Dudka <kdudka@redhat.com> 7.28.1-1P�p�- new upstream releaseI��k]9.Kamil Dudka <kdudka@redhat.com> 7.28.0-1P��- new upstream release�)��j]�w.Kamil Dudka <kdudka@redhat.com> 7.27.0-3Pi��- use the upstream facility to disable problematic tests - do not crash if MD5 fingerprint is not provided by libssh2� ��i]�%.Kamil Dudka <kdudka@redhat.com> 7.27.0-2P@- eliminate unnecessary inotify events on upload via file protocol (#844385)I��h]9.Kamil Dudka <kdudka@redhat.com> 7.27.0-1P�@- new upstream releaser��g]� .Kamil Dudka <kdudka@redhat.com> 7.26.0-6P <�- print reason phrase from HTTP status line on error (#676596)���f��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.26.0-5P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild{��e]�.Kamil Dudka <kdudka@redhat.com> 7.26.0-4O�:�- fix duplicated SSL handshake with multi interface and proxy (#788526)c��dai.Karsten Hopp <karsten@redhat.com> 7.26.0-3O� �- disable test 1319 on ppc64, server times out���c]�).Kamil Dudka <kdudka@redhat.com> 7.26.0-2O�h�- use human-readable error messages provided by NSS (upstream commit 72f4b534)I��b]9.Kamil Dudka <kdudka@redhat.com> 7.26.0-1O�t@- new upstream releaseg��aaq.Karsten Hopp <karsten@redhat.com> 7.25.0-3O��A- valgrind on ppc64 works fine, disable ppc32 onlyu��`a� .Karsten Hopp <karsten@redhat.com> 7.25.0-3O��@- drop BR valgrind on PPC(64) until bugzilla #810992 gets fixed�=��_]� .Kamil Dudka <kdudka@redhat.com> 7.25.0-2O�@- use NSS_InitContext() to initialize NSS if available (#738456) - provide human-readable names for NSS errors (upstream commit a60edcc6)� ��^_�;.Paul Howarth <paul@city-fan.org> 7.25.0-1Ole�- new upstream release (#806264) - fix character encoding of docs with a patch rather than just iconv - update debug and multilib patches - don't use macros for commands - reduce size of %prep output for readability_��]]e.Kamil Dudka <kdudka@redhat.com> 7.24.0-1O �@- new upstream release (fixes CVE-2012-0036)I��\_7.Paul Howarth <paul@city-fan.org> 7.23.0-6O��- rebuild for gcc 4.7z��[]�.Kamil Dudka <kdudka@redhat.com> 7.23.0-5O�@- upstream patch that allows to run FTPS tests with nss-3.13 (#760060)d��Z]o.Kamil Dudka <kdudka@redhat.com> 7.23.0-4N��@- allow to run FTPS tests with nss-3.13 (#760060)}��Y]� .Kamil Dudka <kdudka@redhat.com> 7.23.0-3N�@- avoid unnecessary timeout event when waiting for 100-continue (#767490)� ��X]�%.Kamil Dudka <kdudka@redhat.com> 7.23.0-2N�=@- curl -JO now uses -O name if no C-D header comes (upstream commit c532604)S��W]M.Kamil Dudka <kdudka@redhat.com> 7.23.0-1Nå�- new upstream release (#754391) _ � �" � � x � � H � >/�F��PX � _ z�� _�.Kamil Dudka <kdudka@redhat.com> 7.29.0-30V�@- curl.1: --disable-{eprt,epsv} are ignored for IPv6 hosts (#1305974)w�� _�.Kamil Dudka <kdudka@redhat.com> 7.29.0-29V��@- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1275769)�s�� _� .Kamil Dudka <kdudka@redhat.com> 7.29.0-28V7P@- prevent NSS from incorrectly re-using a session (#1269855) - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324) - disable unreliable upstream test-case 2032 (#1241168)}�� _� .Kamil Dudka <kdudka@redhat.com> 7.29.0-27V/g@- SSH: do not require public key file for user authentication (#1275769)���_�!.Kamil Dudka <kdudka@redhat.com> 7.29.0-26U��- implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318) - improve parsing of URL-encoded user name and password (#1260178) - prevent test46 from failing due to expired cookie (#1258834)m��_.Kamil Dudka <kdudka@redhat.com> 7.29.0-25UP��- fix spurious failure of test 1500 on ppc64le (#1218272)�F��_�/.Kamil Dudka <kdudka@redhat.com> 7.29.0-24UH��- use the default min/max TLS version provided by NSS (#1170339) - improve handling of timeouts and blocking direction to speed up FTP (#1218272)�+��_�y.Kamil Dudka <kdudka@redhat.com> 7.29.0-23U>$�- require credentials to match for NTLM re-use (CVE-2015-3143) - close Negotiate connections when done (CVE-2015-3148)j��_y.Kamil Dudka <kdudka@redhat.com> 7.29.0-22T�q@- reject CRLFs in URLs passed to proxy (CVE-2014-8150)�T��_�K.Kamil Dudka <kdudka@redhat.com> 7.29.0-21T���- use only full matches for hosts used as IP address in cookies (CVE-2014-3613) - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)�1��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-20Tw@- eliminate unnecessary delay when resolving host from /etc/hosts (#1130239) - allow to enable/disable new AES cipher-suites (#1066065) - call PR_Cleanup() on curl tool exit if NSPR is used (#1071254) - implement non-blocking TLS handshake (#1091429) - fix limited connection re-use for unencrypted HTTP (#1101092) - disable libcurl-level downgrade to SSLv3 (#1154060) - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161182) - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1166264)���_�+.Kamil Dudka <kdudka@redhat.com> 7.29.0-19S2�@- fix connection re-use when using different log-in credentials (CVE-2014-0138)}�� a�.Paul Howarth <paul@city-fan.org> 7.29.0-18S&�- add all perl build requirements for the test suite, in a portable ways��_� .Kamil Dudka <kdudka@redhat.com> 7.29.0-17SK@- fix documentation of curl's options --tlsv1.[0-2] (#1066364)�|��~_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-16R��- allow to use TLS > 1.0 if built against recent NSS (#1036789) - use proxy name in error message when proxy is used (#1042831) - refresh expired cookie in test172 from upstream test-suite (#1063693)�3��}_� .Kamil Dudka <kdudka@redhat.com> 7.29.0-15R�@- allow to use ECC ciphers if NSS implements them (#1058776) - re-use of wrong HTTP NTLM connection in libcurl (CVE-2014-0015)N��|a?.Daniel Mach <dmach@redhat.com> - 7.29.0-14R�U�- Mass rebuild 2014-01-24N��{a?.Daniel Mach <dmach@redhat.com> - 7.29.0-13R�k�- Mass rebuild 2013-12-27{��z_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-12RW�@- do not limit the speed of SCP upload on a fast connection (#1014928)���y_�'.Kamil Dudka <kdudka@redhat.com> 7.29.0-11R-�@- avoid delay if FTP is aborted in CURLOPT_HEADERFUNCTION callback (#1005686)^��x_a.Kamil Dudka <kdudka@redaht.com> 7.29.0-10R' �- avoid a busy-loop in curl_easy_perform()� ��w]�%.Kamil Dudka <kdudka@redaht.com> 7.29.0-9R �@- FTP: when EPSV gets a 229 but fails to connect, retry with PASV (#1002815)s��v]� .Kamil Dudka <kdudka@redaht.com> 7.29.0-8Q�@- mention all option listed in 'curl --help' in curl.1 man page|��u]� .Kamil Dudka <kdudka@redhat.com> 7.29.0-7Qő�- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174) | �] � � � . � b��5�/��6� | � ��"c�1.Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���!c�+.Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)� �� c�W.Kamil Dudka <kdudka@redhat.com> - 7.29.0-50[ @- remove dead code, detected by Coverity Analysis - remove unused variable, detected by GCC and Clangi�� cs.Kamil Dudka <kdudka@redhat.com> - 7.29.0-49[�- make curl --speed-limit work with TFTP (#1584750)��� c�;.Kamil Dudka <kdudka@redhat.com> - 7.29.0-48[�@- fix RTSP bad headers buffer over-read (CVE-2018-1000301) - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120) - fix LDAP NULL pointer dereference (CVE-2018-1000121) - fix RTSP RTP buffer over-read (CVE-2018-1000122) - http: prevent custom Authorization headers in redirects (CVE-2018-1000007) - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256) - update certificates in the test-suite because they expire soon (#1572723)u�� c� .Kamil Dudka <kdudka@redhat.com> - 7.29.0-47Z�<�- make NSS deallocate PKCS #11 objects early enough (#1510247)y�� c�.Kamil Dudka <kdudka@redhat.com> - 7.29.0-46Z.s@- reset authentication state when HTTP transfer is done (#1511523)���c�'.Kamil Dudka <kdudka@redhat.com> - 7.29.0-45Y��- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257){��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-44Y�o@- drop 0109-curl-7.29.0-crl-valgrind.patch no longer needed (#1427883)�:��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-43Y� �- curl --socks5-{basic,gssapi}: control socks5 auth (#1409208) - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883) - nss: do not leak PKCS #11 slot while loading a key (#1444860) - nss: fix a possible use-after-free in SelectClientCert() (#1473158)k��_{.Kamil Dudka <kdudka@redhat.com> 7.29.0-42Xۡ�- fix use of uninitialized variable detected by Covscanb��_i.Kamil Dudka <kdudka@redhat.com> 7.29.0-41Xۡ�- make FTPS work with --proxytunnel (#1420327)b��_i.Kamil Dudka <kdudka@redhat.com> 7.29.0-40X��- make FTPS work with --proxytunnel (#1420327)|��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-39X���- work around race condition in PK11_FindSlotByName() in NSS (#1404815)b��_i.Kamil Dudka <kdudka@redhat.com> 7.29.0-38X�Y�- make FTPS work with --proxytunnel (#1420327)���_�).Kamil Dudka <kdudka@redhat.com> 7.29.0-37W�<�- fix tight loop in non-blocking TLS handhsake over proxy (#1388162) - handle cookies with numerical IPv6 address (#1341503) - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740) - curl -E: allow to escape ':' in cert nickname (#1376062) - run automake in %prep to avoid patching Makefile.in files from now on��_�!.Kamil Dudka <kdudka@redhat.com> 7.29.0-36W�$�- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)���_�G.Kamil Dudka <kdudka@redhat.com> 7.29.0-35W�/@- fix incorrect use of a previously loaded certificate from file (related to CVE-2016-5420)�"��_�g.Kamil Dudka <kdudka@redhat.com> 7.29.0-34W�Q�- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option (required by the fix for CVE-2016-5419)�6��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-33W�h�- fix re-using connections with wrong client cert (CVE-2016-5420) - fix TLS session resumption client cert bypass (CVE-2016-5419)o��_�.Kamil Dudka <kdudka@redhat.com> 7.29.0-32Wg�- configure: improve detection of GCC's -fvisibility= flagq�� _�.Kamil Dudka <kdudka@redhat.com> 7.29.0-31Wg�- prevent curl_multi_wait() from missing an event (#1347904) % � �% � 1 � . | D � e �wC��^�f ���U �u z5��^ � ���Gk�7/Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-2<��@- Stop the curl-config script from printing -I/usr/include and -L/usr/lib (#59497)A��Fk/Trond Eivind Glomsrød <teg@redhat.com> 7.9.5-1<���- 7.9.5C��Ek /Trond Eivind Glomsrød <teg@redhat.com> 7.9.3-2<{x�- RebuildF��Da//Nalin Dahyabhai <nalin@redhat.com> 7.9.3-1<N��- update to 7.9.3B��CU3/Tim Powers <timp@redhat.com> 7.9.2-2<<0�- automated rebuildA��Bk/Trond Eivind Glomsrød <teg@redhat.com> 7.9.2-1<<0�- 7.9.2� ��AQ�q/Nalin Dahyabhai <nalin@redhat.com>;}@- include curl-config in curl-devel - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurlR��@]K/Crutcher Dunnavant <crutcher@redhat.com>;Uz@- added openssl-devel build req=��?E9/Tim Powers <timp@redhat.com>; @- built for the distroO��>G[/Jeff Johnson <jbj@redhat.com>:�j�- upgrade to curl-7.7.2. - enable IPv6.H��=EO/Tim Powers <timp@redhat.com>:��@- rebuilt against openssl-0.9.6-1]��<Ey/Tim Powers <timp@redhat.com>:Te�- fixed mising ldconfigs - updated to 7.5.2, bug fixes9��;E1/Tim Powers <timp@redhat.com>:4��- updated to 7.5.1�6��:E�)/Tim Powers <timp@redhat.com>:�@- update to 7.4.1 to fix bug #20337, problems with curl -c - not using patch anymore, it's included in the new source. Keeping for referenceN��9QO/Nalin Dahyabhai <nalin@redhat.com>9�3�- fix bogus req in -devel packageb��8E�/Tim Powers <timp@redhat.com>9�3�- devel package needed defattr so that root owns the files{��7Q�'/Nalin Dahyabhai <nalin@redhat.com>9��- update to 7.3 - apply vsprintf/vsnprintf patch from Colin Phipps via Debianu��6Q�/Nalin Dahyabhai <nalin@redhat.com>9��- enable SSL support - fix packager tag - move buildroot to %{_tmppath}H��5EO/Tim Powers <timp@redhat.com>9���- fixed vendor tag for bug #150286��4Q /Prospector <prospector@redhat.com>9|/�- rebuilt[��3Eu/Tim Powers <timp@redhat.com>9k @- workaround alpha build problems with optimizations0��2E /Tim Powers <timp@redhat.com>9i��- rebuiltZ��1Es/Tim Powers <timp@redhat.com>9;�@- put man pages in correct place - use %makeinstall9��0E1/Tim Powers <timp@redhat.com>97@- updated to 6.5.2O��/E]/Tim Powers <timp@redhat.com>8 #�- updated sources to 6.2 - gzip man page6��.E+/Tim Powers <timp@redhat.com>7�r@- changed group� ��-E�}/Tim Powers <timp@redhat.com>7�,@- changelog started - general cleanups, changed prefix to /usr, added manpage to files section - including in Powertools�3��,��U.Pavel Mayorov <pmayorov@cloudlinux.com> - 7.29.0-59.1.tuxcare.els2e.w@- CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2023-27534: fix SFTP path '~' resolving discrepancy - fix read off end of array for SCP home directory case�-��+��I.Pavel Mayorov <pmayorov@cloudlinux.com> - 7.29.0-59.1.tuxcare.els1e%<�- CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificatesv��*s}.Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���)c�'.Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���(c�%.Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��'cq.Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��&c�.Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��%cq.Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��$cu.Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��#c�.Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) ' � �v8�� � � 9 � m $ � i � � � � @��xA �^�6Mq��E�~ � � M��ng7/Ivana Varekova <varekova@redhat.com> 7.14.0-1B�i�- rebuild new version���mg�?/Ivana Varekova <varekova@redhat.com> 7.13.1-3Bwg�- fix bug 150768 - curl-7.12.3-2 breaks basic authentication used Daniel Stenberg patchu��lY�/Joe Orton <jorton@redhat.com> 7.13.1-2Bl�- update to use ca-bundle in /etc/pki - mark License as MIT not MPLJ��kg1/Ivana Varekova <varekova@redhat.com> 7.13.1-1B.�@- rebuilt (7.13.1)N��jYG/Tomas Mraz <tmraz@redhat.com> 7.13.0-2B$Y@- rebuild with openssl-0.9.7e8��iW /Florian La Roche <laroche@redhat.com>BA@- 7.13.0���hY�[/Joe Orton <jorton@redhat.com> 7.12.3-3B �@- don't pass /usr to --with-libidn to remove "-L/usr/lib" from 'curl-config --libs' output on x86_64.�W��ga�O/Adrian Havill <havill@redhat.com> 7.12.3-1A�)@- Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794) - require libidn-devel for devel subpkg (#141341) - remove proftpd kludge; included upstream�d��fa�i/Adrian Havill <havill@redhat.com> 7.12.1-1Ac�@- upgrade to 7.12.1 - enable GSSAPI auth (#129353) - enable I18N domain names (#134595) - workaround for broken ProFTPD SSL auth (#134133). Thanks to Aleksandar Milivojevice��eam/Adrian Havill <havill@redhat.com> 7.12.0-4AZ��- move new docs position so defattr gets appliedc��dcg/Warren Togami <wtogami@redhat.com> 7.12.0-3AX �- remove INSTALL, move libcurl docs to -develT��cM_/Jindrich Novy <jnovy@redhat.com>A�@- updated to 7.12.0 - updated nousr patch3��bK /Elliot Lee <sopwith@redhat.com>@��- rebuiltq��aa�/Adrian Havill <havill@redhat.com> 7.11.1-1@s�@- upgraded; updated nousr patch - added COPYING (#115956) -3��`K /Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��_K /Elliot Lee <sopwith@redhat.com>@,�@- rebuiltk��^eu/Florian La Roche <Florian.LaRoche@redhat.de>@��- update to 7.10.8 - remove patch2, already upstream�B��]a�%/Adrian Havill <havill@redhat.com> 7.10.6-7?�6�- aclocal before libtoolize - move OpenLDAP license so it's present as a doc file, present in both the source and binary as per conditions� ��\a�;/Adrian Havill <havill@redhat.com> 7.10.6-6?���- add OpenLDAP copyright notice for usage of code, add OpenLDAP license for this codec��[ai/Adrian Havill <havill@redhat.com> 7.10.6-5?���- match serverAltName certs with SSL (#106168)L��Ze7/Adrian Havill <havill@redhat.com> 7.10.6-4.1?f�A- bump n-v-r for RHEL� ��Ya�;/Adrian Havill <havill@redhat.com> 7.10.6-4?f�@- restore ca cert bundle (#104400) - require openssl, we want to use its ca-cert bundle:��XY /Joe Orton <jorton@redhat.com> 7.10.6-3?[ �- rebuildN��W]C/Joe Orton <jorton@redhat.com> 7.10.6-2.2?Xz�- fix to include libcurl.soL��Ve7/Adrian Havill <havill@redhat.com> 7.10.6-2.1?I�A- bump n-v-r for RHELn��Ua/Adrian Havill <havill@redhat.com> 7.10.6-2?I�@- devel subpkg needs openssl-devel as a Require (#102963)E��Ta-/Adrian Havill <havill@redhat.com> 7.10.6-1?%@- bumped versionE��Sa-/Adrian Havill <havill@redhat.com> 7.10.5-1?w�- bumped version3��RK /Elliot Lee <sopwith@redhat.com>>��@- rebuilt]��QeY/Florian La Roche <Florian.LaRoche@redhat.de>>���- update to 7.10.4 - adapt nousr patch0��PE /Tim Powers <timp@redhat.com>>.��- rebuilte��OWw/Joe Orton <jorton@redhat.com> 7.9.8-4>-6@- don't add -L/usr/lib to 'curl-config --libs' output>��Na /Nalin Dahyabhai <nalin@redhat.com> 7.9.8-3>�@- rebuild�B��MW�//Joe Orton <jorton@redhat.com> 7.9.8-2=�@- fix `curl-config --libs` output for libdir!=/usr/lib - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la - libtoolize and reconfK��Lk//Trond Eivind Glomsrød <teg@redhat.com> 7.9.8-1=;�- 7.9.8 (# 69473):��KE3/Tim Powers <timp@redhat.com>=@- automated rebuild:��JE3/Tim Powers <timp@redhat.com><��@- automated rebuildA��Ik/Trond Eivind Glomsrød <teg@redhat.com> 7.9.7-1<�@- 7.9.7A��Hk/Trond Eivind Glomsrød <teg@redhat.com> 7.9.6-1<ƞ@- 7.9.6 ! m �d �U � < � � j b � >�g�T�FR��S��#D � m ~��_� /Jindrich Novy <jnovy@redhat.com> 7.16.4-7F�l@- add zlib-devel BR to enable gzip compressed transfers in curl (#292211)Q��_G/Jindrich Novy <jnovy@redhat.com> 7.16.4-6F�1�- provide webclient (#225671)�Z�� _�W/Jindrich Novy <jnovy@redhat.com> 7.16.4-5F��- add support for the NSS PKCS#11 pem reader so the command-line is the same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com) - switch to NSS againZ�� _Y/Jindrich Novy <jnovy@redhat.com> 7.16.4-4F�@- revert back to use OpenSSL (#266021)X�� _U/Jindrich Novy <jnovy@redhat.com> 7.16.4-3FҼ�- don't use openssl, use nss insteadr�� _�/Jindrich Novy <jnovy@redhat.com> 7.16.4-2F�S@- fix anonymous ftp login (#251570), thanks to David CantrellF�� _1/Jindrich Novy <jnovy@redhat.com> 7.16.4-1F��@- update to 7.16.4�7��_�/Jindrich Novy <jnovy@redhat.com> 7.16.3-1F�@- update to 7.16.3 - drop .print patch, applied upstream - next series of merge review fixes by Paul Howarth - remove aclocal stuff, no more needed - simplify makefile arguments - don't reference standard library paths in libcurl.pc - include docs/CONTRIBUTEu��_� /Jindrich Novy <jnovy@redhat.com> 7.16.2-5Fvs�- don't print like crazy (#236981), backported from upstream CVS�o��_�/Jindrich Novy <jnovy@redhat.com> 7.16.2-4Fr@- another series of review fixes (#225671), thanks to Paul Howarth - check version of ldap library automatically - don't use %makeinstall and preserve timestamps - drop useless patches� ��_�=/Jindrich Novy <jnovy@redhat.com> 7.16.2-3FDZ�- add automake BR to curl-devel to fix aclocal dir. ownership, thanks to Patrice Dumasx��_�/Jindrich Novy <jnovy@redhat.com> 7.16.2-2FC @- package libcurl.m4 in curl-devel (#239664), thanks to Quy TonthatF��_1/Jindrich Novy <jnovy@redhat.com> 7.16.2-1F �- update to 7.16.2b��_i/Jindrich Novy <jnovy@redhat.com> 7.16.1-3Eّ@- don't create/ship static libraries (#225671)_��_c/Jindrich Novy <jnovy@redhat.com> 7.16.1-2E� @- merge review related spec fixes (#225671)F�� _1/Jindrich Novy <jnovy@redhat.com> 7.16.1-1E��- update to 7.16.1���_�3/Jindrich Novy <jnovy@redhat.com> 7.16.0-5E��@- don't package generated makefiles for docs/examples to avoid multilib conflicts���~_�+/Jindrich Novy <jnovy@redhat.com> 7.16.0-4E���- convert spec to UTF-8 - don't delete BuildRoot in %prep phase - rpmlint fixes���}a�M/Jindrich Novy <jnovy@redhat.com> -7.16.0-3E\R�- prevent curl from dlopen()ing missing ldap libraries so that ldap:// requests work (#215928)�2��|c�/Jindrich Novy <jnovy@redhat.com> - 7.16.0-2EG:�- fix BuildRoot - add Requires: pkgconfig for curl-devel - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)M��{c;/Jindrich Novy <jnovy@redhat.com> - 7.16.0-1EE�@- update to curl-7.16.0`��zkY/Jindrich Novy <jnovy@redhat.com> - 7.15.5-1.fc6D�- update to curl-7.15.5 - use %{?dist}L��yk1/Ivana Varekova <varekova@redhat.com> - 7.15.4-1D�@- update to 7.15.4u��xk�/Ivana Varekova <varekova@redhat.com> - 7.15.3-1D �@- fix multilib problem using pkg-config - update to 7.15.3� ��wk�W/Ivana Varekova <varekova@redhat.com> - 7.15.1-2C���- fix multilib problem - #181290 - curl-devel.i386 not installable together with curl-devel.x86-64h��vqc/Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2.1C�@- bump again for double-long bug on ppc(64)n��ums/Jesse Keating <jkeating@redhat.com> - 7.15.1-1.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��tS /Jesse Keating <jkeating@redhat.com>C�q�- rebuiltW��sgK/Ivana Varekova <varekova@redhat.com> 7.15.1-1C� @- update to 7.15.1 (bug 175191)k��rgs/Ivana Varekova <varekova@redhat.com> 7.15.0-3C��@- fix curl-config bug 174556 - missing vernum valueA��qg /Ivana Varekova <varekova@redhat.com> 7.15.0-2Cq�- rebuiltJ��pg1/Ivana Varekova <varekova@redhat.com> 7.15.0-1CT�- update to 7.15.0J��og1/Ivana Varekova <varekova@redhat.com> 7.14.1-1CNL@- update to 7.14.1 [ �� � T � � � }��N�i��+�9�H��H � [ � ��+]�%/Kamil Dudka <kdudka@redhat.com> 7.19.4-4I��@- fix memory leak in src/main.c (accepted by upstream) - avoid using %ifarchd��*]o/Kamil Dudka <kdudka@redhat.com> 7.19.4-3I���- make libcurl-devel multilib-ready (bug #488922)� ��)_�[/Jindrich Novy <jnovy@redhat.com> 7.19.4-2I�@- drop .easy-leak patch, causes problems in pycurl (#488791) - fix libcurl-devel dependencies (#488895)�>��(_� /Jindrich Novy <jnovy@redhat.com> 7.19.4-1I��- update to 7.19.4 (fixes CVE-2009-0037) - fix leak in curl_easy* functions, thanks to Kamil Dudka - drop nss-fix patch, applied upstream���'��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild� ��&]�;/Kamil Dudka <kdudka@redhat.com> 7.19.3-1I���- update to 7.19.3, dropped applied nss patches - add patch fixing 7.19.3 curl/nss bugs]��%__/Jindrich Novy <jnovy@redhat.com> 7.18.2-9IFF�- rebuild for f10/rawhide cvs tag clashesq��$_�/Jindrich Novy <jnovy@redhat.com> 7.18.2-8I:i@- use improved NSS patch, thanks to Rob Crittenden (#472489)y��#_�/Jindrich Novy <jnovy@redhat.com> 7.18.2-7H�e@- update the thread safety patch, thanks to Rob Crittenden (#462217)w��"c� /Warren Togami <wtogami@redhat.com> 7.18.2-6H�|@- add thread safety to libcurl NSS cleanup() functions (#459297)U��!q=/Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-5H��@- undo mini libcurl.so.3f�� q_/Tom "spot" Callaway <tcallawa@redhat.com> 7.18.2-4H�)�- make miniature library for libcurl.so.3Z�� _Y/Jindrich Novy <jnovy@redhat.com> 7.18.2-3Hn�- enable support for libssh2 (#453958)��� _�'/Jindrich Novy <jnovy@redhat.com> 7.18.2-2HX��- fix curl_multi_perform() over a proxy (#450140), thanks to Rob CrittendenF�� _1/Jindrich Novy <jnovy@redhat.com> 7.18.2-1HF��- update to 7.18.2�e�� _�m/Jindrich Novy <jnovy@redhat.com> 7.18.1-2H!��- spec cleanup, thanks to Paul Howarth (#225671) - drop BR: libtool - convert CHANGES and README to UTF-8 - _GNU_SOURCE in CFLAGS is no more needed - remove bogus rpath�v��_�/Jindrich Novy <jnovy@redhat.com> 7.18.1-1G��@- update to curl 7.18.1 (fixes #397911) - add ABI docs for libcurl - remove --static-libs from curl-config - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf substitution (#432667)t��_� /Jindrich Novy <jnovy@redhat.com> 7.18.0-2G�~�- define _GNU_SOURCE so that NI_MAXHOST gets defined from glibc���_�?/Jindrich Novy <jnovy@redhat.com> 7.18.0-1G��- update to curl-7.18.0 - drop sslgen patch -> applied upstream - fix typo in description���_�//Jindrich Novy <jnovy@redhat.com> 7.17.1-6G��- fix curl-devel obsoletes so that we don't break F8->F9 upgrade path (#429612)���_�'/Jindrich Novy <jnovy@redhat.com> 7.17.1-5G�e�- do not attempt to close a bad socket (#427966), thanks to Caolan McNamara|��_�/Jindrich Novy <jnovy@redhat.com> 7.17.1-4GUA@- rebuild because of the openldap soname bump - remove old nsspem patch�5��_� /Jindrich Novy <jnovy@redhat.com> 7.17.1-3GO�@- drop useless ldap library detection since curl doesn't dlopen()s it but links to it -> BR: openldap-devel - enable LDAPS support (#225671), thanks to Paul Howarth - BR: krb5-devel to reenable GSSAPI support - simplify build process - update description~��_� /Jindrich Novy <jnovy@redhat.com> 7.17.1-2GD �- update description to contain complete supported servers list (#393861)�M��_�=/Jindrich Novy <jnovy@redhat.com> 7.17.1-1G>�- update to curl 7.17.1 - include patch to enable SSL usage in NSS when a socket is opened nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)f��ao/Jindrich Novy <jnovy@redhat.com> 7.16.4-10G 3�- correctly provide/obsolete curl-devel (#130251)l��_}/Jindrich Novy <jnovy@redhat.com> 7.16.4-9G 3�- create libcurl and libcurl-devel subpackages (#130251)z��_�/Jindrich Novy <jnovy@redhat.com> 7.16.4-8G@- list features correctly when curl is compiled against NSS (#316191) � s�4 � g � = � T � � � 3�2Y�Kp�B�r�; � j��I_y/Kamil Dudka <kdudka@redhat.com> 7.19.6-13Jս@- fix timeout issues and gcc warnings within lib/nss.cm��H_/Kamil Dudka <kdudka@redhat.com> 7.19.6-12J�1@- upstream patch for NSS support written by Guenter Knaufa��G_g/Kamil Dudka <kdudka@redhat.com> 7.19.6-11J�H@- build libcurl with c-ares support (#514771)]��F__/Kamil Dudka <kdudka@redhat.com> 7.19.6-10J�S�- require libssh2>=1.2 properly (#525002)w��E]�/Kamil Dudka <kdudka@redhat.com> 7.19.6-9J�@- let curl test-suite use valgrind - require libssh2>=1.2 (#525002)Q��Dg?/Chris Weyl <cweyl@alumni.drew.edu> - 7.19.6-8J�j�- rebuild for libssh2 1.2V��C]S/Kamil Dudka <kdudka@redhat.com> 7.19.6-7J�$�- make curl test-suite more verboseh��B]w/Kamil Dudka <kdudka@redhat.com> 7.19.6-6J��@- update polling patch to the latest upstream versiond��A]o/Kamil Dudka <kdudka@redhat.com> 7.19.6-5J���- cover ssh and stunnel support by the test-suite�V��@]�Q/Kamil Dudka <kdudka@redhat.com> 7.19.6-4J�^@- use pkg-config to find nss and libssh2 if possible - better patch (not only) for SCP/SFTP polling - improve error message for not matching common name (#516056)���?]�Y/Kamil Dudka <kdudka@redhat.com> 7.19.6-3J��@- avoid tight loop during a sftp upload - http://permalink.gmane.org/gmane.comp.web.curl.library/24744k��>]}/Kamil Dudka <kdudka@redhat.com> 7.19.6-2J���- let curl package depend on the same version of libcurl�T��=]�M/Kamil Dudka <kdudka@redhat.com> 7.19.6-1J�Q�- new upstream release, dropped applied patches - changed NSS code to not ignore the value of ssl.verifyhost and produce more verbose error messages (#516056)a��<k[/Ville Skyttä <ville.skytta@iki.fi> - 7.19.5-10J���- Use lzma compressed upstream tarball.���;��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.19.5-9Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild�^��:]�a/Kamil Dudka <kdudka@redhat.com> 7.19.5-8Jf�@- do not pre-login to all PKCS11 slots, it causes problems with HW tokens - try to select client certificate automatically when not specified, thanks to Claes Jakobsson��9]�#/Kamil Dudka <kdudka@redhat.com> 7.19.5-7JW-@- fix SIGSEGV when using NSS client certificates, thanks to Claes Jakobsson|��8]� /Kamil Dudka <kdudka@redhat.com> 7.19.5-6JP��- force test suite to use the just built libcurl, thanks to Paul Howarthh��7]w/Kamil Dudka <kdudka@redhat.com> 7.19.5-5JL�@- run test suite after build - enable built-in manualc��6]m/Kamil Dudka <kdudka@redhat.com> 7.19.5-4JBA- fix bug introduced by the last build (#504857)d��5]o/Kamil Dudka <kdudka@redhat.com> 7.19.5-3JB@- exclude curlbuild.h content from spec (#504857)���4]�)/Kamil Dudka <kdudka@redhat.com> 7.19.5-2J/�@- avoid unguarded comparison in the spec file, thanks to R P Herrold (#504857)^��3]c/Kamil Dudka <kdudka@redhat.com> 7.19.5-1J�@- update to 7.19.5, dropped applied patches���2_�A/Kamil Dudka <kdudka@redhat.com> 7.19.4-11J@- fix infinite loop while loading a private key, thanks to Michael Cronenworth (#453612)���1_�E/Kamil Dudka <kdudka@redhat.com> 7.19.4-10I��@- fix curl/nss memory leaks while using client certificate (#453612, accepted by upstream)Z��0][/Kamil Dudka <kdudka@redhat.com> 7.19.4-9I��- add missing BuildRequire for autoconfk��/]}/Kamil Dudka <kdudka@redhat.com> 7.19.4-8I��- fix configure.ac to not discard -g in CFLAGS (#496778)���.k�%/Debarshi Ray <rishi@fedoraproject.org> 7.19.4-7I�@- Fixed configure to respect the environment's CFLAGS and CPPFLAGS settings.�.��-]�/Kamil Dudka <kdudka@redhat.com> 7.19.4-6I�z�- upstream patch fixing memory leak in lib/nss.c (#453612) - remove redundant dependency of libcurl-devel on libssh2-devel���,]�5/Kamil Dudka <kdudka@redhat.com> 7.19.4-5I��@- enable 6 additional crypto algorithms by default (#436781, accepted by upstream) � a+ � � � � � ���M i�� ���7� � �`��c]�e/Kamil Dudka <kdudka@redhat.com> 7.21.1-2Lrb�- re-enable test575 on s390(x), already fixed (upstream commit d63bdba) - modify system headers to work around gcc bug (#617757) - curl -T now ignores file size of special files (#622520) - fix kerberos proxy authentication for https (#625676) - work around glibc/valgrind problem on x86_64 (#626470)I��b]9/Kamil Dudka <kdudka@redhat.com> 7.21.1-1Lc�@- new upstream releaseM��aWG/Dan Horák <dan[at]danny.cz> 7.21.0-3L;�- disable test 575 on s390(x)b��`]k/Kamil Dudka <kdudka@redhat.com> 7.21.0-2L(��- add support for NTLM authentication (#603783)�5��_]�/Kamil Dudka <kdudka@redhat.com> 7.21.0-1L��- new upstream release, drop applied patches - update of %description - disable valgrind for certain test-cases (libssh2 problem)q��^]�/Kamil Dudka <kdudka@redhat.com> 7.20.1-6K���- fix -J/--remote-header-name to strip CR-LF (upstream patch)�M��]]�?/Kamil Dudka <kdudka@redhat.com> 7.20.1-5K�#@- CRL support now works again (#581926) - make it possible to start a testing OpenSSH server when building with SELinux in the enforcing mode (#521087)�9��\]�/Kamil Dudka <kdudka@redhat.com> 7.20.1-4K��@- upstream patch preventing failure of test536 with threaded DNS resolver - upstream patch preventing SSL handshake timeout underflow�7��[_�/Paul Howarth <paul@city-fan.org> 7.20.1-3K�:@- replace Rawhide s390-sleep patch with a more targeted patch adding a delay after tests 513 and 514 rather than after all tests���Z]�I/Kamil Dudka <kdudka@redhat.com> 7.20.1-2K��- experimentally enabled threaded DNS lookup - make curl-config multilib ready again (#584107)I��Y]9/Kamil Dudka <kdudka@redhat.com> 7.20.1-1K�E�- new upstream release^��X]c/Kamil Dudka <kdudka@redhat.com> 7.20.0-4K��@- add missing quote in libcurl.m4 (#576252)�X��W]�U/Kamil Dudka <kdudka@redhat.com> 7.20.0-3K�g@- throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972) - valgrind temporarily disabled (#574889) - kerberos installation prefix has been changedc��V]m/Kamil Dudka <kdudka@redhat.com> 7.20.0-2K��- exclude test1112 from the test suite (#565305)� ��U]�c/Kamil Dudka <kdudka@redhat.com> 7.20.0-1Ks�@- new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP - dropped patches applied upstream - dropped curl-7.16.0-privlibs.patch no longer useful - a new patch forcing -lrt when linking the curl tool and test-cases� ��T_�[/Kamil Dudka <kdudka@redhat.com> 7.19.7-11Kb�- upstream patch adding a new option -J/--remote-header-name - dropped temporary workaround for #545779Q��SeA/Chris Weyl <cweyl@alumni.drew.edu> 7.19.7-10KO@- bump for libssh2 rebuildx��R]�/Kamil Dudka <kdudka@redhat.com> 7.19.7-9K.�- temporary workaround for #548269 (restored behavior of 7.19.7-4)f��Q]s/Kamil Dudka <kdudka@redhat.com> 7.19.7-8K �A- replace hard wired port numbers in the test suite���P]�A/Kamil Dudka <kdudka@redhat.com> 7.19.7-7K �@- use different port numbers for 32bit and 64bit builds - temporary workaround for #545779z��O]�/Kamil Dudka <kdudka@redhat.com> 7.19.7-6K ?�- make it possible to run test241 - re-enable SCP/SFTP tests (#539444)� ��N]�7/Kamil Dudka <kdudka@redhat.com> 7.19.7-5KK@- avoid use of uninitialized value in lib/nss.c - suppress failure of test513 on s390���M]�M/Kamil Dudka <kdudka@redhat.com> 7.19.7-4K@- do not require valgrind on s390 and s390x - temporarily disabled SCP/SFTP test-suite (#539444)�R��L]�I/Kamil Dudka <kdudka@redhat.com> 7.19.7-3J���- fix crash on doubly closed NSPR descriptor, patch contributed by Kevin Baughman (#534176) - new version of patch for broken TLS servers (#525496, #527771)[��K]]/Kamil Dudka <kdudka@redhat.com> 7.19.7-2J�l�- increased release number (CVS problem)���J]�Y/Kamil Dudka <kdudka@redhat.com> 7.19.7-1J�l�- new upstream release, dropped applied patches - workaround for broken TLS servers (#525496, #527771) X } � \ � O � � '� X �7��p]�/Kamil Dudka <kdudka@redhat.com> 7.21.4-1M^_@- new upstream release - avoid memory leak on SSL connection failure (upstream commit a40f58d) - work around valgrind bug (#678518)���o��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.21.3-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild_��n]e/Kamil Dudka <kdudka@redhat.com> 7.21.3-2M-��- build libcurl with --enable-hidden-symbols���m_�A/Paul Howarth <paul@city-fan.org> 7.21.3-1M �@- update to 7.21.3: - added --noconfigure switch to testcurl.pl - added --xattr option - added CURLOPT_RESOLVE and --resolve - added CURLAUTH_ONLY - added version-check.pl to the examples dir - check for libcurl features for some command line options - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support - http_chunks: remove debug output - URL-parsing: consider ? a divider - SSH: avoid using the libssh2_ prefix - SSH: use libssh2_session_handshake() to work on win64 - ftp: prevent server from hanging on closed data connection when stopping a transfer before the end of the full transfer (ranges) - LDAP: detect non-binary attributes properly - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT - gnutls->handshake: improved timeout handling - security: pass the right parameter to init - krb5: use GSS_ERROR to check for error - TFTP: resend the correct data - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected - GnuTLS: now detects socket errors on Windows - symbols-in-versions: updated en masse - added a couple of examples that were missing from the tarball - Curl_send/recv_plain: return errno on failure - Curl_wait_for_resolv (for c-ares): correct timeout - ossl_connect_common: detect connection re-use - configure: prevent link errors with --librtmp - openldap: use remote port in URL passed to ldap_init_fd() - url: provide dead_connection flag in Curl_handler::disconnect - lots of compiler warning fixes - ssh: fix a download resume point calculation - fix getinfo CURLINFO_LOCAL* for reused connections - multi: the returned running handles counter could turn negative - multi: only ever consider pipelining for connections doing HTTP(S) - drop upstream patches now in tarball - update bz650255 and disable-test1112 patches to apply against new codebase - add workaround for false-positive glibc-detected buffer overflow in tftpd test server with FORTIFY_SOURCE (similar to #515361)�>��l]�!/Kamil Dudka <kdudka@redhat.com> 7.21.2-5L�,@- do not send QUIT to a dead FTP control connection (#650255) - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed�c��k]�k/Kamil Dudka <kdudka@redhat.com> 7.21.2-4L�7�- prevent FTP client from hanging on unrecognized ABOR response (#649347) - return more appropriate error code in case FTP server session idle timeout has exceeded (#650255)y��j]�/Kamil Dudka <kdudka@redhat.com> 7.21.2-3Lʷ@- prevent FTP server from hanging on closed data connection (#643656)q��i_�/Paul Howarth <paul@city-fan.org> 7.21.2-2L��- enforce versioned libssh2 dependency for libcurl (#642796)���h]�K/Kamil Dudka <kdudka@redhat.com> 7.21.2-1L��@- new upstream release, drop applied patches - make 0102-curl-7.21.2-debug.patch less intrusive:��g3E/jkeating - 7.21.1-6L�*@- Rebuilt for gcc bug 634757p��f]�/Kamil Dudka <kdudka@redhat.com> 7.21.1-5L�o@- make it possible to run SCP/SFTP tests on x86_64 (#632914)k��e]}/Kamil Dudka <kdudka@redhat.com> 7.21.1-4L�)@- work around glibc/valgrind problem on x86_64 (#631449)�~��d_� /Paul Howarth <paul@city-fan.org> 7.21.1-3Ls�@- fix up patches so there's no need to run autotools in the rpm build - drop buildreq automake - drop dependency on automake for devel package from F-14, where %{_datadir}/aclocal is included in the filesystem package - drop dependency on pkgconfig for devel package from F-11, where pkgconfig dependencies are auto-generated � �1�� � L � | � s � .�E�zD�`�%� �G � � ��]�%/Kamil Dudka <kdudka@redhat.com> 7.27.0-2P@- eliminate unnecessary inotify events on upload via file protocol (#844385)I��]9/Kamil Dudka <kdudka@redhat.com> 7.27.0-1P�@- new upstream releaser��]� /Kamil Dudka <kdudka@redhat.com> 7.26.0-6P <�- print reason phrase from HTTP status line on error (#676596)��� ��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.26.0-5P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild{�� ]�/Kamil Dudka <kdudka@redhat.com> 7.26.0-4O�:�- fix duplicated SSL handshake with multi interface and proxy (#788526)c�� ai/Karsten Hopp <karsten@redhat.com> 7.26.0-3O� �- disable test 1319 on ppc64, server times out��� ]�)/Kamil Dudka <kdudka@redhat.com> 7.26.0-2O�h�- use human-readable error messages provided by NSS (upstream commit 72f4b534)I�� ]9/Kamil Dudka <kdudka@redhat.com> 7.26.0-1O�t@- new upstream releaseg��aq/Karsten Hopp <karsten@redhat.com> 7.25.0-3O��A- valgrind on ppc64 works fine, disable ppc32 onlyu��a� /Karsten Hopp <karsten@redhat.com> 7.25.0-3O��@- drop BR valgrind on PPC(64) until bugzilla #810992 gets fixed�=��]� /Kamil Dudka <kdudka@redhat.com> 7.25.0-2O�@- use NSS_InitContext() to initialize NSS if available (#738456) - provide human-readable names for NSS errors (upstream commit a60edcc6)� ��_�;/Paul Howarth <paul@city-fan.org> 7.25.0-1Ole�- new upstream release (#806264) - fix character encoding of docs with a patch rather than just iconv - update debug and multilib patches - don't use macros for commands - reduce size of %prep output for readability_��]e/Kamil Dudka <kdudka@redhat.com> 7.24.0-1O �@- new upstream release (fixes CVE-2012-0036)I��_7/Paul Howarth <paul@city-fan.org> 7.23.0-6O��- rebuild for gcc 4.7z��]�/Kamil Dudka <kdudka@redhat.com> 7.23.0-5O�@- upstream patch that allows to run FTPS tests with nss-3.13 (#760060)d��]o/Kamil Dudka <kdudka@redhat.com> 7.23.0-4N��@- allow to run FTPS tests with nss-3.13 (#760060)}�� ]� /Kamil Dudka <kdudka@redhat.com> 7.23.0-3N�@- avoid unnecessary timeout event when waiting for 100-continue (#767490)� ��]�%/Kamil Dudka <kdudka@redhat.com> 7.23.0-2N�=@- curl -JO now uses -O name if no C-D header comes (upstream commit c532604)S��~]M/Kamil Dudka <kdudka@redhat.com> 7.23.0-1Nå�- new upstream release (#754391)e��}]q/Kamil Dudka <kdudka@redhat.com> 7.22.0-2Nw.�- nss: select client certificates by DER (#733657)� ��|]�9/Kamil Dudka <kdudka@redhat.com> 7.22.0-1NoE�- new upstream release - curl-config now provides dummy --static-libs option (#733956){��{_�/Paul Howarth <paul@city-fan.org> 7.21.7-4NP�@- actually fix SIGSEGV of curl -O -J given more than one URL (#723075)�v��z]�/Kamil Dudka <kdudka@redhat.com> 7.21.7-3NI @- fix SIGSEGV of curl -O -J given more than one URL (#723075) - introduce the --delegation option of curl (#730444) - initialize NSS with no database if the selected database is broken (#728562)i��y]y/Kamil Dudka <kdudka@redhat.com> 7.21.7-2N98@- add a new option CURLOPT_GSSAPI_DELEGATION (#719939)_��x]e/Kamil Dudka <kdudka@redhat.com> 7.21.7-1N*�- new upstream release (fixes CVE-2011-2192)q��w]�/Kamil Dudka <kdudka@redhat.com> 7.21.6-2M�d@- avoid an invalid timeout event on a reused handle (#679709)J��v_9/Paul Howarth <paul@city-fan.org> 7.21.6-1M��@- new upstream releasew��u]�/Kamil Dudka <kdudka@redhat.com> 7.21.5-2M�'�- fix the output of curl-config --version (upstream commit 82ecc85)I��t]9/Kamil Dudka <kdudka@redhat.com> 7.21.5-1M�'�- new upstream releaseV��siG/Peter Robinson <pbrobinson@gmail.com> 7.21.4-4M���- no valgrind on ARMv5 archesQ��r_G/Dennis Gilmore <dennis@ausil.us> 7.21.4-3Mr%�- no valgrind on sparc archesv��q]�/Kamil Dudka <kdudka@redhat.com> 7.21.4-2Mc�@- do not ignore failure of SSL handshake (upstream commit 7aa2d10) � R� � a � � � � � Z�^�u��R��"� � �1��)_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-20Tw@- eliminate unnecessary delay when resolving host from /etc/hosts (#1130239) - allow to enable/disable new AES cipher-suites (#1066065) - call PR_Cleanup() on curl tool exit if NSPR is used (#1071254) - implement non-blocking TLS handshake (#1091429) - fix limited connection re-use for unencrypted HTTP (#1101092) - disable libcurl-level downgrade to SSLv3 (#1154060) - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161182) - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1166264)���(_�+/Kamil Dudka <kdudka@redhat.com> 7.29.0-19S2�@- fix connection re-use when using different log-in credentials (CVE-2014-0138)}��'a�/Paul Howarth <paul@city-fan.org> 7.29.0-18S&�- add all perl build requirements for the test suite, in a portable ways��&_� /Kamil Dudka <kdudka@redhat.com> 7.29.0-17SK@- fix documentation of curl's options --tlsv1.[0-2] (#1066364)�|��%_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-16R��- allow to use TLS > 1.0 if built against recent NSS (#1036789) - use proxy name in error message when proxy is used (#1042831) - refresh expired cookie in test172 from upstream test-suite (#1063693)�3��$_� /Kamil Dudka <kdudka@redhat.com> 7.29.0-15R�@- allow to use ECC ciphers if NSS implements them (#1058776) - re-use of wrong HTTP NTLM connection in libcurl (CVE-2014-0015)N��#a?/Daniel Mach <dmach@redhat.com> - 7.29.0-14R�U�- Mass rebuild 2014-01-24N��"a?/Daniel Mach <dmach@redhat.com> - 7.29.0-13R�k�- Mass rebuild 2013-12-27{��!_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-12RW�@- do not limit the speed of SCP upload on a fast connection (#1014928)��� _�'/Kamil Dudka <kdudka@redhat.com> 7.29.0-11R-�@- avoid delay if FTP is aborted in CURLOPT_HEADERFUNCTION callback (#1005686)^�� _a/Kamil Dudka <kdudka@redaht.com> 7.29.0-10R' �- avoid a busy-loop in curl_easy_perform()� �� ]�%/Kamil Dudka <kdudka@redaht.com> 7.29.0-9R �@- FTP: when EPSV gets a 229 but fails to connect, retry with PASV (#1002815)s�� ]� /Kamil Dudka <kdudka@redaht.com> 7.29.0-8Q�@- mention all option listed in 'curl --help' in curl.1 man page|�� ]� /Kamil Dudka <kdudka@redhat.com> 7.29.0-7Qő�- fix heap-based buffer overflow in curl_easy_unescape() (CVE-2013-2174)�5��]�/Kamil Dudka <kdudka@redhat.com> 7.29.0-6Qzl@- prevent an artificial timeout event due to stale speed-check data (#906031) - show proper host name on failed resolve (#957173)}��]� /Kamil Dudka <kdudka@redhat.com> 7.29.0-5Qg�@- fix cookie tailmatching to prevent cross-domain leakage (CVE-2013-1944)�8��]�/Kamil Dudka <kdudka@redhat.com> 7.29.0-4Q?�- do not ignore poll() failures other than EINTR (#919127) - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)�2��]� /Kamil Dudka <kdudka@redhat.com> 7.29.0-3Q7/�- switch SSL socket into non-blocking mode after handshake (#960765) - drop the hide_selinux.c hack no longer needed in %checkq��]�/Kamil Dudka <kdudka@redhat.com> 7.29.0-2Q']�- fix a SIGSEGV when closing an unused multi handle (#914411)_��]e/Kamil Dudka <kdudka@redhat.com> 7.29.0-1QE�- new upstream release (fixes CVE-2013-0249)r��]� /Kamil Dudka <kdudka@redhat.com> 7.28.1-3P�D�- require valgrind for build only on i386 and x86_64 (#886891)�\��]�]/Kamil Dudka <kdudka@redhat.com> 7.28.1-2P�D�- prevent NSS from crashing on client auth hook failure - clear session cache if a client cert from file is used - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILEI��]9/Kamil Dudka <kdudka@redhat.com> 7.28.1-1P�p�- new upstream releaseI��]9/Kamil Dudka <kdudka@redhat.com> 7.28.0-1P��- new upstream release�)��]�w/Kamil Dudka <kdudka@redhat.com> 7.27.0-3Pi��- use the upstream facility to disable problematic tests - do not crash if MD5 fingerprint is not provided by libssh2 � '� > � � H P � W�o� v�k� �J � {��A_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-44Y�o@- drop 0109-curl-7.29.0-crl-valgrind.patch no longer needed (#1427883)�:��@_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-43Y� �- curl --socks5-{basic,gssapi}: control socks5 auth (#1409208) - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883) - nss: do not leak PKCS #11 slot while loading a key (#1444860) - nss: fix a possible use-after-free in SelectClientCert() (#1473158)k��?_{/Kamil Dudka <kdudka@redhat.com> 7.29.0-42Xۡ�- fix use of uninitialized variable detected by Covscanb��>_i/Kamil Dudka <kdudka@redhat.com> 7.29.0-41Xۡ�- make FTPS work with --proxytunnel (#1420327)b��=_i/Kamil Dudka <kdudka@redhat.com> 7.29.0-40X��- make FTPS work with --proxytunnel (#1420327)|��<_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-39X���- work around race condition in PK11_FindSlotByName() in NSS (#1404815)b��;_i/Kamil Dudka <kdudka@redhat.com> 7.29.0-38X�Y�- make FTPS work with --proxytunnel (#1420327)���:_�)/Kamil Dudka <kdudka@redhat.com> 7.29.0-37W�<�- fix tight loop in non-blocking TLS handhsake over proxy (#1388162) - handle cookies with numerical IPv6 address (#1341503) - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740) - curl -E: allow to escape ':' in cert nickname (#1376062) - run automake in %prep to avoid patching Makefile.in files from now on��9_�!/Kamil Dudka <kdudka@redhat.com> 7.29.0-36W�$�- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)���8_�G/Kamil Dudka <kdudka@redhat.com> 7.29.0-35W�/@- fix incorrect use of a previously loaded certificate from file (related to CVE-2016-5420)�"��7_�g/Kamil Dudka <kdudka@redhat.com> 7.29.0-34W�Q�- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option (required by the fix for CVE-2016-5419)�6��6_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-33W�h�- fix re-using connections with wrong client cert (CVE-2016-5420) - fix TLS session resumption client cert bypass (CVE-2016-5419)o��5_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-32Wg�- configure: improve detection of GCC's -fvisibility= flagq��4_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-31Wg�- prevent curl_multi_wait() from missing an event (#1347904)z��3_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-30V�@- curl.1: --disable-{eprt,epsv} are ignored for IPv6 hosts (#1305974)w��2_�/Kamil Dudka <kdudka@redhat.com> 7.29.0-29V��@- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1275769)�s��1_� /Kamil Dudka <kdudka@redhat.com> 7.29.0-28V7P@- prevent NSS from incorrectly re-using a session (#1269855) - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324) - disable unreliable upstream test-case 2032 (#1241168)}��0_� /Kamil Dudka <kdudka@redhat.com> 7.29.0-27V/g@- SSH: do not require public key file for user authentication (#1275769)���/_�!/Kamil Dudka <kdudka@redhat.com> 7.29.0-26U��- implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318) - improve parsing of URL-encoded user name and password (#1260178) - prevent test46 from failing due to expired cookie (#1258834)m��._/Kamil Dudka <kdudka@redhat.com> 7.29.0-25UP��- fix spurious failure of test 1500 on ppc64le (#1218272)�F��-_�//Kamil Dudka <kdudka@redhat.com> 7.29.0-24UH��- use the default min/max TLS version provided by NSS (#1170339) - improve handling of timeouts and blocking direction to speed up FTP (#1218272)�+��,_�y/Kamil Dudka <kdudka@redhat.com> 7.29.0-23U>$�- require credentials to match for NTLM re-use (CVE-2015-3143) - close Negotiate connections when done (CVE-2015-3148)j��+_y/Kamil Dudka <kdudka@redhat.com> 7.29.0-22T�q@- reject CRLFs in URLs passed to proxy (CVE-2014-8150)�T��*_�K/Kamil Dudka <kdudka@redhat.com> 7.29.0-21T���- use only full matches for hosts used as IP address in cookies (CVE-2014-3613) - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707) a w�� n ` � G�X�l x�u�&�:�W � a g��Ygk0Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)���Xg�'0Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s��Wg�0Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h��Vgm0Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e��Ugg0Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)��Tg�0Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)�(��S��7/Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 7.29.0-59.2.tuxcare.els1e��- Moved tuxcare patches from 7.29.0-59.1.tuxcare.els2 - CVE-2023-38546: cookie: remove unnecessary struct fields - CVE-2022-27782: check additional TLS or SSH connection parameters that should have prohibited connection reuse - CVE-2023-27534: fix SFTP path '~' resolving discrepancy - fix read off end of array for SCP home directory case� ��Rw�E/Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keysv��Qs}/Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���Pc�'/Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���Oc�%/Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��Ncq/Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��Mc�/Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��Lcq/Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��Kcu/Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��Jc�/Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��Ic�1/Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���Hc�+/Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)� ��Gc�W/Kamil Dudka <kdudka@redhat.com> - 7.29.0-50[ @- remove dead code, detected by Coverity Analysis - remove unused variable, detected by GCC and Clangi��Fcs/Kamil Dudka <kdudka@redhat.com> - 7.29.0-49[�- make curl --speed-limit work with TFTP (#1584750)���Ec�;/Kamil Dudka <kdudka@redhat.com> - 7.29.0-48[�@- fix RTSP bad headers buffer over-read (CVE-2018-1000301) - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120) - fix LDAP NULL pointer dereference (CVE-2018-1000121) - fix RTSP RTP buffer over-read (CVE-2018-1000122) - http: prevent custom Authorization headers in redirects (CVE-2018-1000007) - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256) - update certificates in the test-suite because they expire soon (#1572723)u��Dc� /Kamil Dudka <kdudka@redhat.com> - 7.29.0-47Z�<�- make NSS deallocate PKCS #11 objects early enough (#1510247)y��Cc�/Kamil Dudka <kdudka@redhat.com> - 7.29.0-46Z.s@- reset authentication state when HTTP transfer is done (#1511523)���Bc�'/Kamil Dudka <kdudka@redhat.com> - 7.29.0-45Y��- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257) � �Y � l � N � y w �e�x��� �t�z�0 � � X��u]W2Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��t[I2Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��sic2Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��ris2Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��qQ� 2Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��pYm2Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���oY�I2Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��nY_2Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��mS 2Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��lg�]2Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch���kc�U2Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E��jc�)2Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)���i��1Koba Karaputadze <kkaraputadze@cloudlinux.com> - 2.76-17.3.tuxcare.els1f�=@- change EDNS.0 UDP packet size from 4096 to 1232 - CVE-2023-28450n��hku1Petr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w��gk�1Petr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}��fk�1Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!��ek�Y1Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg��dgk1Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)���cg�'1Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s��bg�1Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h��agm1Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e��`gg1Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)��_g�1Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)���^��0Koba Karaputadze <kkaraputadze@cloudlinux.com> - 2.76-17.3.tuxcare.els1f�=@- change EDNS.0 UDP packet size from 4096 to 1232 - CVE-2023-28450n��]ku0Petr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w��\k�0Petr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}��[k�0Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!��Zk�Y0Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementation L }��; � ; � � f � C � Z�|�B�0�H��t�2 � L u��c� 2Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��cs2Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��c}2Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��gQ2Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��c}2Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��c�2Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��c�W2Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��c2Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh�� cq2Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx�� a�2Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5�� a� 2Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T�� aK2Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]�� a]2Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��_g2Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��a�2Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��gg2Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��g2Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���a�+2Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��Ue2Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��]U2Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b��ga2Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^�� gY2Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��i 2Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��~UY2Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��}g� 2Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for buildk��|iq2Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��{W�!2Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��zY�#2Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��y_g2Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��xk?2David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���wk�2David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��v]�#2Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no. Z B�4 � ' x � 2 � ��G��{��?�c � Z o��/os2Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���.c�A2Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��-aM2Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��,e�2Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��+c�2Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��*c92Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��)c�q2Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��(c92Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��'c� 2Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��&c�w2Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��%c92Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��$c/2Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��#c�2Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��"a�i2Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��!a_2Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.��� a�Q2Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� �� a�32Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s�� a�2Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V�� cM2Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq�� c�2Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��e�q2Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now.h��eo2Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��a�Y2Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��e�q2Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[��eU2Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9��e�2Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static) � �&�m � � , � U � ] � D���d�V�,�a�� � � f��NU{2Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)���M��2Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde��Lam2Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b��Kag2Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��Ja92Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��Ia�2Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��Ha�o2Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��GU}2Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��FU�I2Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��EU�2Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��Da92Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��Ca92Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��BaS2Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��AaQ2Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��@a�2Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��?ay2Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���>a�W2Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���=��2Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���<a�O2Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��;a�2Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��:aM2Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���9a�U2Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��8ai2Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��7a{2Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t��6a� 2Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R��5a�E2Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689)n��4a2Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��3aW2Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW��2s?2Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��1sK2Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��0s{2Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333) % � � �l � 0 � 5 � � Y � N�y)�{ �B�|,�}���5�f � ]��ssK2Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��rsC2Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��qse2Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��psK2Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��o}K2Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��nsK2Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��ms� 2Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��lsK2Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support���k� �2Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL��jc92Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��iYa2Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��hc92Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��gcu2Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��fcI2Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��eca2Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��dcc2Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��ccy2Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��bcU2Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL��ac92Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��`c92Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��_c�2Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��^cK2Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��]cc2Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��\cE2Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��[c92Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��Zc�2Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��Ya�2Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��Xa�a2Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��WaW2Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���Va�Q2Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��Ua�2Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��Taa2Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987)_��Saa2Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��Rc_2Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��Qa92Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��Pa�!2Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��OUa2Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng) ! d �@�W � 9 � $ � q � 0 � v '�\��9�j �Q�>�� d � ��g�[2Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��a�2Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��a�/2Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��aq2Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��aa2Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��a�w2Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��i� 2Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M�� _?2Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F�� a/2Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz�� a�2Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM�� _?2Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p�� [�2Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��a92Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��a[2Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��a92Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��a�2Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��a92Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��aq2Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��a92Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release�����2Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�� a92Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��aG2Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��~a92Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��}ca2Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��|c�[2Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��{c}2Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��zk]2Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��yam2Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/...K��xa92Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��wa92Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release���v��2Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��u]E2Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��tsc2Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120 � 4� � � S � P � N�e���F�L�j�R�I � � a��._g3Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��-k?3David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���,k�3David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��+]�#3Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��*]W3Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��)[I3Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��(ic3Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��'is3Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��&Q� 3Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��%Ym3Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���$Y�I3Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��#Y_3Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��"S 3Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��!g�]3Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch��� c�U3Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E�� c�)3Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)��� �� 2Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw�� g� 2Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)��� g� 2Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���g� 2Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��g� 2Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��gy2Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��g�2Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��g�[2Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)� ��g�/2Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��g�)2Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233) � � � q + � c � � A � h ��y ��9�i��S � [��LeU3Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9��Ke�3Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u��Jc� 3Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��Ics3Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��Hc}3Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��GgQ3Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��Fc}3Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��Ec�3Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��Dc�W3Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��Cc3Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��Bcq3Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��Aa�3Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��@a� 3Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��?aK3Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��>a]3Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��=_g3Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��<a�3Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��;gg3Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��:g3Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���9a�+3Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��8Ue3Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��7]U3Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b��6ga3Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^��5gY3Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��4i 3Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��3UY3Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��2g� 3Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for buildk��1iq3Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��0W�!3Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��/Y�#3Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188) B Q�D � � O � $ ��d�� �!�\���w � � B W��gs?3Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��fsK3Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��es{3Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��dos3Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���cc�A3Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��baM3Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��ae�3Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��`c�3Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��_c93Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��^c�q3Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��]c93Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��\c� 3Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��[c�w3Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��Zc93Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��Yc/3Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��Xc�3Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��Wa�i3Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��Va_3Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.���Ua�Q3Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� ��Ta�33Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��Sa�3Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��RcM3Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��Qc�3Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��Pe�q3Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now.h��Oeo3Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��Na�Y3Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��Me�q3Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281) � �0 � a � � � � y � =�P��J���Ma��0�+�d � � K��a93Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��a�!3Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��Ua3Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f��U{3Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)�����3Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde��am3Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b�� ag3Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��a93Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��~a�3Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��}a�o3Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��|U}3Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��{U�I3Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��zU�3Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��ya93Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��xa93Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��waS3Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��vaQ3Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��ua�3Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��tay3Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���sa�W3Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���r��3Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���qa�O3Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��pa�3Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��oaM3Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���na�U3Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��mai3Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��la{3Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t��ka� 3Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R��ja�E3Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689)n��ia3Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��haW3Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capable % �:�a � f � � : � & � Z �<�s�]���-�f�:�l ���+��3Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��*]E3Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��)sc3Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��(sK3Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��'sC3Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��&se3Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��%sK3Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��$}K3Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��#sK3Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��"s� 3Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��!sK3Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support��� � �3Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL�� c93Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[�� Ya3Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL�� c93Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej�� cu3Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��cI3Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��ca3Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��cc3Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��cy3Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��cU3Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL��c93Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��c93Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��c�3Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��cK3Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��cc3Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��cE3Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��c93Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��c�3Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��a�3Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� �� a�a3Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ�� aW3Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build��� a�Q3Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr�� a�3Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_�� aa3Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987)_��aa3Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��c_3Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131) c �b��! ~ � u & � ; � � � V �B�z)���-�c� � c � ��Kg�/3Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��Jg�)3Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� ��Ig�[3Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��Ha�3Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��Ga�/3Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��Faq3Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��Eaa3Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��Da�w3Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��Ci� 3Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��B_?3Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��Aa/3Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��@a�3Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��?_?3Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��>[�3Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��=a93Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��<a[3Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��;a93Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��:a�3Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��9a93Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��8aq3Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��7a93Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release���6��3Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK��5a93Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��4aG3Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��3a93Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��2ca3Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��1c�[3Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��0c}3Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��/k]3Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��.am3Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/...K��-a93Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��,a93Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release y � 2 � $ � � :�� �5�] �*�M�g � y k��fiq4Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��eW�!4Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��dY�#4Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��c_g4Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��bk?4David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���ak�4David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��`]�#4Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��_]W4Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��^[I4Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��]ic4Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��\is4Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��[Q� 4Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��ZYm4Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���YY�I4Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��XY_4Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��WS 4Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��Vg�]4Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch���Uc�U4Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E��Tc�)4Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)���S�� 3Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��Rg� 3Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���Qg� 3Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���Pg� 3Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��Og� 3Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��Ngy3Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��Mg�3Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��Lg�[3Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � 9��8 � w � � < � v d�| (�6�f���c� � h��eo4Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��a�Y4Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��e�q4Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[��eU4Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9�� e�4Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u��c� 4Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��~cs4Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��}c}4Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��|gQ4Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��{c}4Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��zc�4Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��yc�W4Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��xc4Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��wcq4Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��va�4Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��ua� 4Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��taK4Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��sa]4Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��r_g4Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��qa�4Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��pgg4Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��og4Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���na�+4Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��mUe4Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��l]U4Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b��kga4Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^��jgY4Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��ii 4Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��hUY4Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��gg� 4Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for build . Q � � } � ~ � � �T�����<�3�Y��. n�� a4Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z�� aW4Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW�� s?4Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��sK4Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��s{4Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��os4Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���c�A4Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��aM4Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��e�4Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��c�4Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��c94Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��c�q4Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��c94Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��c� 4Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��c�w4Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��c94Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��c/4Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq�� c�4Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d�� a�i4Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^�� a_4Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.��� a�Q4Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� �� a�34Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��a�4Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��cM4Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��c�4Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��e�q4Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now. � �1 � Z � b � I � � �i�[� 1�f ���4�` � � _��=aa4Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��<c_4Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��;a94Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��:a�!4Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��9Ua4Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f��8U{4Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)���7��4Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde��6am4Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b��5ag4Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��4a94Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��3a�4Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��2a�o4Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��1U}4Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��0U�I4Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��/U�4Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��.a94Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��-a94Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��,aS4Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��+aQ4Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��*a�4Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��)ay4Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���(a�W4Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���'��4Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���&a�O4Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��%a�4Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��$aM4Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���#a�U4Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��"ai4Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��!a{4Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t�� a� 4Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R�� a�E4Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689) % � �'�, � � P � E � p � r �9�s#�t�v��,�] �2�E � � K��ba94Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��aa94Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release���`��4Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��_]E4Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��^sc4Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��]sK4Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��\sC4Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��[se4Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��ZsK4Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��Y}K4Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��XsK4Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��Ws� 4Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��VsK4Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support���U� �4Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL��Tc94Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��SYa4Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��Rc94Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��Qcu4Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��PcI4Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��Oca4Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��Ncc4Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��Mcy4Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��LcU4Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL��Kc94Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��Jc94Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��Ic�4Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��HcK4Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��Gcc4Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��FcE4Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��Ec94Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��Dc�4Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��Ca�4Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��Ba�a4Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��AaW4Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���@a�Q4Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��?a�4Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��>aa4Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987) �1� � i � ( � n � T � � 1�b�I�6�\� � �� g�/4Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��g�)4Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� ��~g�[4Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��}a�4Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��|a�/4Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��{aq4Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��zaa4Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��ya�w4Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��xi� 4Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��w_?4Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��va/4Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��ua�4Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��t_?4Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��s[�4Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��ra94Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��qa[4Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��pa94Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��oa�4Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��na94Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��maq4Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��la94Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release���k��4Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK��ja94Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��iaG4Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��ha94Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��gca4Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��fc�[4Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��ec}4Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��dk]4Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��cam4Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/... y � 2 � $ � � :�� �5�] �*�M�g � y k��iq5Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��W�!5Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��Y�#5Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��_g5Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��k?5David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���k�5David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��]�#5Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��]W5Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��[I5Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��ic5Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��is5Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��Q� 5Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��Ym5Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���Y�I5Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ�� Y_5Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7�� S 5Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a�� g�]5Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch��� c�U5Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E�� c�)5Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)����� 4Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��g� 4Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���g� 4Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���g� 4Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��g� 4Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��gy4Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��g�4Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��g�[4Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � 9��8 � w � � < � v d�| (�6�f���c� � h��9eo5Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��8a�Y5Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��7e�q5Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[��6eU5Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9��5e�5Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u��4c� 5Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��3cs5Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��2c}5Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��1gQ5Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��0c}5Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��/c�5Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��.c�W5Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��-c5Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��,cq5Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��+a�5Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��*a� 5Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��)aK5Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��(a]5Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��'_g5Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��&a�5Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��%gg5Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��$g5Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���#a�+5Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��"Ue5Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��!]U5Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b�� ga5Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^�� gY5Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB�� i 5Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU�� UY5Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B�� g� 5Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for build . Q � � } � ~ � � �T�����<�3�Y��. n��Sa5Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��RaW5Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW��Qs?5Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��PsK5Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��Os{5Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��Nos5Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���Mc�A5Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��LaM5Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��Ke�5Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��Jc�5Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��Ic95Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��Hc�q5Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��Gc95Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��Fc� 5Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��Ec�w5Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��Dc95Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��Cc/5Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��Bc�5Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��Aa�i5Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��@a_5Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.���?a�Q5Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� ��>a�35Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��=a�5Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��<cM5Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��;c�5Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��:e�q5Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now. � �1 � Z � b � I � � �i�[� 1�f ���4�` � � _��raa5Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��qc_5Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��pa95Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��oa�!5Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��nUa5Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f��mU{5Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)���l��5Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde��kam5Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b��jag5Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��ia95Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��ha�5Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��ga�o5Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��fU}5Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��eU�I5Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��dU�5Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��ca95Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��ba95Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��aaS5Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��`aQ5Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��_a�5Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��^ay5Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���]a�W5Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���\��5Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���[a�O5Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��Za�5Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��YaM5Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���Xa�U5Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��Wai5Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��Va{5Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t��Ua� 5Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R��Ta�E5Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689) % � �'�, � � P � E � p � r �9�s#�t�v��,�] �2�E � � K��a95Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��a95Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release�����5Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��]E5Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��sc5Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��sK5Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��sC5Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��se5Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��sK5Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��}K5Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]�� sK5Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release�� s� 5Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]�� sK5Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support��� � �5Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL�� c95Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��Ya5Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��c95Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��cu5Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��cI5Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��ca5Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��cc5Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��cy5Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��cU5Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL�� c95Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��c95Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��~c�5Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��}cK5Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��|cc5Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��{cE5Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��zc95Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��yc�5Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��xa�5Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��wa�a5Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��vaW5Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���ua�Q5Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��ta�5Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��saa5Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987) �1� � i � ( � n � T � � 1�b�I�6�\� � ��5g�/5Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��4g�)5Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� ��3g�[5Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��2a�5Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��1a�/5Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��0aq5Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��/aa5Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��.a�w5Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��-i� 5Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��,_?5Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��+a/5Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��*a�5Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��)_?5Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��([�5Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��'a95Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��&a[5Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��%a95Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��$a�5Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��#a95Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��"aq5Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��!a95Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release��� ��5Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�� a95Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR�� aG5Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK�� a95Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`�� ca5Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��c�[5Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��c}5Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��k]5Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��am5Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/... y � 2 � $ � � :�� �5�] �*�M�g � y k��Piq6Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��OW�!6Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��NY�#6Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��M_g6Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��Lk?6David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���Kk�6David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��J]�#6Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��I]W6Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��H[I6Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��Gic6Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��Fis6Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��EQ� 6Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��DYm6Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���CY�I6Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��BY_6Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��AS 6Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��@g�]6Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch���?c�U6Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E��>c�)6Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)���=�� 5Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��<g� 5Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���;g� 5Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���:g� 5Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��9g� 5Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��8gy5Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��7g�5Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��6g�[5Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � 9��8 � w � � < � v d�| (�6�f���c� � h��neo6Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��ma�Y6Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��le�q6Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[��keU6Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9��je�6Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u��ic� 6Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��hcs6Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��gc}6Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��fgQ6Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��ec}6Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��dc�6Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��cc�W6Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��bc6Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��acq6Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��`a�6Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��_a� 6Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��^aK6Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��]a]6Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��\_g6Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��[a�6Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��Zgg6Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��Yg6Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���Xa�+6Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��WUe6Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��V]U6Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b��Uga6Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^��TgY6Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��Si 6Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��RUY6Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��Qg� 6Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for build . Q � � } � ~ � � �T�����<�3�Y��. n��a6Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��aW6Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW��s?6Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��sK6Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��s{6Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��os6Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���c�A6Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��aM6Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc�� e�6Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��c�6Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��~c96Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��}c�q6Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��|c96Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��{c� 6Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��zc�w6Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��yc96Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��xc/6Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��wc�6Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��va�i6Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��ua_6Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.���ta�Q6Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� ��sa�36Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��ra�6Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��qcM6Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��pc�6Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��oe�q6Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now. � �1 � Z � b � I � � �i�[� 1�f ���4�` � � _��'aa6Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��&c_6Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��%a96Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��$a�!6Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��#Ua6Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f��"U{6Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)���!��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde�� am6Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b�� ag6Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K�� a96Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx�� a�6Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g�� a�o6Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��U}6Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��U�I6Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��U�6Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��a96Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��a96Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��aS6Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��aQ6Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��a�6Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��ay6Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���a�W6Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)�����6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���a�O6Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��a�6Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��aM6Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4��� a�U6Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc�� ai6Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l�� a{6Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t�� a� 6Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R�� a�E6Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689) % � �'�, � � P � E � p � r �9�s#�t�v��,�] �2�E � � K��La96Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��Ka96Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release���J��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��I]E6Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��Hsc6Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��GsK6Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��FsC6Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��Ese6Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��DsK6Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��C}K6Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��BsK6Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��As� 6Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��@sK6Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support���?� �6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL��>c96Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��=Ya6Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��<c96Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��;cu6Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��:cI6Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��9ca6Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��8cc6Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��7cy6Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��6cU6Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL��5c96Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��4c96Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��3c�6Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��2cK6Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��1cc6Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��0cE6Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��/c96Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��.c�6Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��-a�6Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��,a�a6Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��+aW6Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���*a�Q6Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��)a�6Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��(aa6Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987) �1� � i � ( � n � T � � 1�b�I�6�\� � ��jg�/6Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��ig�)6Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� ��hg�[6Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��ga�6Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��fa�/6Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��eaq6Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��daa6Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��ca�w6Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��bi� 6Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��a_?6Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��`a/6Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��_a�6Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��^_?6Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��][�6Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��\a96Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��[a[6Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��Za96Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��Ya�6Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��Xa96Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��Waq6Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��Va96Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release���U��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK��Ta96Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��SaG6Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��Ra96Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��Qca6Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��Pc�[6Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��Oc}6Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��Nk]6Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��Mam6Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/... y � 2 � $ � � :�� �5�] �*�M�g � y k��iq7Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��W�!7Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��Y�#7Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��_g7Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��k?7David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig��� k�7David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��]�#7Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��~]W7Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��}[I7Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��|ic7Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��{is7Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��zQ� 7Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��yYm7Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���xY�I7Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��wY_7Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��vS 7Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��ug�]7Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch���tc�U7Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E��sc�)7Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)���r�� 6Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��qg� 6Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���pg� 6Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���og� 6Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��ng� 6Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��mgy6Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��lg�6Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��kg�[6Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � 9��8 � w � � < � v d�| (�6�f���c� � h��#eo7Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��"a�Y7Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��!e�q7Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[�� eU7Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9�� e�7Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u�� c� 7Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i�� cs7Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n�� c}7Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��gQ7Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��c}7Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��c�7Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��c�W7Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��c7Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��cq7Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��a�7Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��a� 7Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��aK7Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��a]7Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��_g7Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��a�7Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��gg7Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��g7Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)��� a�+7Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[�� Ue7Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W�� ]U7Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b�� ga7Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^�� gY7Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��i 7Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��UY7Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��g� 7Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for build . Q � � } � ~ � � �T�����<�3�Y��. n��=a7Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��<aW7Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW��;s?7Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��:sK7Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��9s{7Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��8os7Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���7c�A7Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��6aM7Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��5e�7Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��4c�7Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��3c97Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��2c�q7Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��1c97Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��0c� 7Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��/c�w7Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��.c97Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��-c/7Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��,c�7Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��+a�i7Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��*a_7Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.���)a�Q7Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� ��(a�37Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��'a�7Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��&cM7Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��%c�7Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��$e�q7Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now. � �1 � Z � b � I � � �i�[� 1�f ���4�` � � _��\aa7Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��[c_7Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��Za97Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��Ya�!7Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y��XUa7Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f��WU{7Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)���V��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde��Uam7Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b��Tag7Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��Sa97Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��Ra�7Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��Qa�o7Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��PU}7Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��OU�I7Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��NU�7Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��Ma97Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��La97Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX��KaS7Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��JaQ7Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��Ia�7Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��Hay7Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���Ga�W7Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���F��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���Ea�O7Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��Da�7Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��CaM7Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���Ba�U7Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��Aai7Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��@a{7Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t��?a� 7Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R��>a�E7Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689) % � �'�, � � P � E � p � r �9�s#�t�v��,�] �2�E � � K��a97Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK�� a97Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release�����7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��~]E7Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��}sc7Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��|sK7Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��{sC7Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��zse7Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��ysK7Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��x}K7Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��wsK7Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��vs� 7Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��usK7Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support���t� �7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL��sc97Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��rYa7Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��qc97Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��pcu7Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��ocI7Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��nca7Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��mcc7Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��lcy7Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z��kcU7Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL��jc97Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL��ic97Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx��hc�7Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U��gcK7Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��fcc7Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��ecE7Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��dc97Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��cc�7Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��ba�7Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��aa�a7Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��`aW7Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���_a�Q7Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��^a�7Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��]aa7Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987) �1� � i � ( � n � T � � 1�b�I�6�\� � �� g�/7Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G�� g�)7Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� �� g�[7Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z�� a�7Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��a�/7Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��aq7Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��aa7Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��a�w7Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��i� 7Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��_?7Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��a/7Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��a�7Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��_?7Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��[�7Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��a97Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��a[7Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��a97Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��a�7Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK�� a97Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg�� aq7Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K�� a97Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release��� ��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�� a97Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��aG7Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��a97Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��ca7Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��c�[7Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��c}7Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��k]7Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��am7Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/... y � 2 � $ � � :�� �5�] �*�M�g � y k��:iq8Bill Nottingham <notting@redhat.com> - 1.38-15D���- prevent libblkid returning /dev/dm-X - fix build{��9W�!8Karel Zak <kzak@redhat.com> - 1.38-14D �- prevent error messages to stderr caused by libblkid calling libdevmapper}��8Y�#8Karel Zak <kzak@redhat.com> - 1.38-13D^�- used upstream version of the blkid-epoch patch (by Theodore Tso, #182188)a��7_g8Peter Jones <pjones@redhat.com> - 1.38-12D�@- Move /etc/blkid.tab to /etc/blkid/blkid.tabS��6k?8David Cantrell <dcantrell@redhat.com> - 1.38-11D u�- BuildRequires pkgconfig���5k�8David Cantrell <dcantrell@redhat.com> - 1.38-10D u�- Disable /etc/blkid.tab caching if time is set before epoch (#182188)��4]�#8Peter Jones <pjones@redhat.com> - 1.38-9C��@- _don't_ handle selinux context on blkid.tab, dwalsh says this is a no-no.X��3]W8Peter Jones <pjones@redhat.com> - 1.38-8C�R@- handle selinux context on blkid.tabP��2[I8Karsten Hopp <karsten@redhat.de> 1.38-7C��@- BuildRequires: gettext-develd��1ic8Jesse Keating <jkeating@redhat.com> - 1.38-6.2C�@- bump again for double-long bug on ppc(64)l��0is8Jesse Keating <jkeating@redhat.com> - 1.38-6.1C�- rebuilt for new gcc4.1 snapshot and glibc changesn��/Q� 8Karel Zak <kzak@redhat.com> 1.38-6C��@- cleanup device-mapper patch - use pkg-config for device-mappera��.Ym8Peter Jones <pjones@redhat.com> 1.38-5C�P@- fix some more minor logic errors in dm probing���-Y�I8Peter Jones <pjones@redhat.com> 1.38-4C���- fix a logic error in dm probing - add priority group for dm devices, so they'll be preferredZ��,Y_8Peter Jones <pjones@redhat.com> 1.38-3C�g@- added support for device-mapper devices7��+S 8Jesse Keating <jkeating@redhat.com>C�q�- rebuilt�a��*g�]8Thomas Woerner <twoerner@redhat.com> 1.38-2.1Cs6@- fixed file conflicts between 32bit and 64bit packages (#168815) - fixed mklost+found crashes with buffer overflow (#157773) Thanks to Arjan van de Ven for the patch���)c�U8Thomas Woerner <twoerner@redhat.com> 1.38-2Cq�- splitted up libs from main package, into a new e2fsprogs-libs package - fixed requires and prereqs�E��(c�)8Thomas Woerner <twoerner@redhat.com> 1.38-1C '�- new version 1.38 - Close File descriptor for unregognized devices (#159878) Thanks to David Milburn for the patch. Merged from RHEL-4 - enable tune2fs to set and clear feature resize_inode (#167816) - removed outdated information from ext2online man page (#164383)���'�� 7Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��&g� 7Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���%g� 7Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���$g� 7Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��#g� 7Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��"gy7Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��!g�7Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`�� g�[7Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � 9��8 � w � � < � v d�| (�6�f���c� � h��Xeo8Eric Sandeen <esandeen@redhat.com> 1.40.2-14G^{�- Fix integer overflows (#414591 / CVE-2007-5497)� ��Wa�Y8Stepan Kasal <skasal@redhat.com> 1.40.2-13GUA@- The -devel package now requires device-mapper-devel, to match the dependency in blkid.pc (#410791)�*��Ve�q8Eric Sandeen <esandeen@redhat.com> 1.40.2-12GL�- Use upstream patch for blkid fat detection, avoids div-by-zero when encountering some BSD partitions (#398281)[��UeU8Eric Sandeen <esandeen@redhat.com> 1.40.2-11G �@- Add arm to multilib header wrapper�9��Te�8Eric Sandeen <esandeen@redhat.com> 1.40.2-10G�- Make (more) file timestamps match those in tarball for multilib tidiness - Fix e2fsprogs-libs summary (shared libs not static)u��Sc� 8Eric Sandeen <esandeen@redhat.com> 1.40.2-9GV@- Detect big-endian squashfs filesystems in libblkid (#305151)i��Rcs8Eric Sandeen <esandeen@redhat.com> 1.40.2-8G2�- Detect squashfs filesystems in libblkid (#305151)n��Qc}8Eric Sandeen <esandeen@redhat.com> 1.40.2-7F�- Fix blkid fat probe when there is a real MBR (#290951)Z��PgQ8Oliver Falk <oliver@linux-kernel.at> 1.40.2-6F�- Add alpha to the header wrappersn��Oc}8Eric Sandeen <esandeen@redhat.com> 1.40.2-5F�=@- wrap a couple headers to fix multilib issues (#270441)|��Nc�8Eric Sandeen <esandeen@redhat.com> 1.40.2-4F�_�- add gawk to e2fsprogs-devel Requires, compile_et needs it (#265961)�\��Mc�W8Eric Sandeen <esandeen@redhat.com> 1.40.2-3F�v�- Update license tags - Fix one open-create caller with no mode - Protect ->open ops from glibc open-create-mode-checker - Fix source URL - Add gawk to BuildRequireso��Lc8Eric Sandeen <esandeen@redhat.com> 1.40.2-2F� �- Fix bug in ext2fs_swap_inode_full() on big-endian boxesh��Kcq8Eric Sandeen <esandeen@redhat.com> 1.40.2-1F��@- New version 1.40.2 - Fix up warning in badblocksx��Ja�8Eric Sandeen <esandeen@redhat.com> 1.39-15F�@- Fix up .po files to remove timestamps; multilib issues (#245653)�5��Ia� 8Eric Sandeen <esandeen@redhat.com> 1.39-14F{��- Many coverity-found potential leaks, segfaults, etc (#239354) - Fix debugfs segfaults when no fs open (#208416, #209330) - Avoid recursive loops in logdump due to symlinks in /dev (#210371) - Don't write changes to the backup superblocks by default (#229561) - Correct byteswapping for fast symlinks with xattrs (#232663) - e2fsck: added sanity check for xattr validation (#230193)T��HaK8Eric Sandeen <esandeen@redhat.com> 1.39-13Fy�- add dist tag to release field]��Ga]8Eric Sandeen <esandeen@redhat.com> 1.39-12Fy�- add LUKS support to libblkid (#242421)a��F_g8Karsten Hopp <karsten@redhat.com> 1.39-11E��@- fix post/preun requirements - use smp flagsp��Ea�8Alasdair Kergon <agk@redhat.com> - 1.39-10E� @- Add build dependency on new device-mapper-devel package.e��Dgg8Thomas Woerner <twoerner@redhat.com> - 1.39-9E��@- build fixes for new automake 1.10 (#220715)q��Cg8Thomas Woerner <twoerner@redhat.com> - 1.39-8E���- make uuid_generate_time generate unique uuids (#218606)���Ba�+8Jarod Wilson <jwilson@redhat.com> - 1.39-7E-@- 32-bit 16T fixups from esandeen (#202807) - Update summaries and descriptions[��AUe8Karel Zak <kzak@redhat.com> - 1.39-6E 8�- Fix problem with empty FAT label (#206656)W��@]U8Peter Jones <pjones@redhat.com> - 1.39-5D�f�- Fix memory leak in device probing.b��?ga8Thomas Woerner <twoerner@redhat.com> - 1.39-4DĶ@- fixed multilib devel conflicts (#192665)^��>gY8Bill Nottingham <notting@redhat.com> - 1.39-3D�p@- prevent libblkid returning /dev/dm-XB��=i 8Jesse Keating <jkeating@redhat.com> - 1.39-2.1D��@- rebuildU��<UY8Karel Zak <kzak@redhat.com> - 1.39-2D�A@- add GFS abd GFS2 support to libblkid�B��;g� 8Thomas Woerner <twoerner@redhat.com> - 1.39-1D��@- new version 1.39 - dropped ext2online, because resize2fs is now able to do online resize - spec file cleanup - enabled checks for build . Q � � } � ~ � � �T�����<�3�Y��. n��ra8Eric Sandeen <sandeen@redhat.com> 1.41.0-2H���- Don't check the group checksum when !GDT_CSUM (#459875)Z��qaW8Eric Sandeen <sandeen@redhat.com> 1.41.0-1Hu��- New upstream version - ext4 capableW��ps?8Eric Sandeen <sandeen@redhat.com> 1.41-0.2.WIP.0707HrA- Fix release macro snafu]��osK8Eric Sandeen <sandeen@redhat.com> 1.41-0.1.WIP.0707Hr@- New upstream snapshot releaseu��ns{8Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617.1H[��- Fix blkid -g segfault when clearing entries (#452333)o��mos8Eric Sandeen <sandeen@redhat.com> 1.41-0.WIP.0617HX��- New upstream snapshot release for ext4 capability���lc�A8Eric Sandeen <sandeen@redhat.com> 1.40.10-3HF��- Tidy up multilib hack for non-multilib arches (#446016) - Fix up postun script (#449868)U��kaM8Dennis Gilmore <dennis@ausil.us> 1.40.10-2HF��- setup header support for sparc��je�8Eric Sandeen <esandeen@redhat.com> 1.40.10-1H6��- New upstream version - Fixes unprivileged blkid use problem (#448591)q��ic�8Eric Sandeen <esandeen@redhat.com> 1.40.9-2H(1@- Fix blkid swap recognition on big-endian boxes (#445786)L��hc98Eric Sandeen <esandeen@redhat.com> 1.40.9-1Hj�- New upstream version�)��gc�q8Eric Sandeen <esandeen@redhat.com> 1.40.8-2G�h�- Update ext2fs_swap_inode_full() fix to match upstream - Check more of swapv1 header in blkid detection (#442937)L��fc98Eric Sandeen <esandeen@redhat.com> 1.40.8-1G�h�- New upstream versionu��ec� 8Eric Sandeen <esandeen@redhat.com> 1.40.7-2G��@- second try at fixing resize2fs vs. large inodes... (#434893)�,��dc�w8Eric Sandeen <esandeen@redhat.com> 1.40.7-1G��- New upstream version, special leap-day edition - Fix resize2fs losing inline xattrs when shrinking (#434893) and add patch to fix swap_inode_full in this case - Allow mke2fs & tune2fs to manipulate large_file feature (#258381) - Handle lvm error conditions in libblkid (#433857) - Allow tune2fs to clear the resize_inode feature (#167816) - Teach blkid to detect LVM2 physical volumes (#409321) - Show "mostly printable" xattrs as text in debugfs (#430621) - Trimmed pre-1.38 rpm changelog entriesL��cc98Eric Sandeen <esandeen@redhat.com> 1.40.6-1G��@- New upstream versionG��bc/8Eric Sandeen <esandeen@redhat.com> 1.40.5-2G�D@- gcc-4.3 rebuildq��ac�8Eric Sandeen <esandeen@redhat.com> 1.40.5-1G��- New upstream version, drop several now-upstream patches.�d��`a�i8Eric Sandeen <sandeen@redhat.com> 1.40.4-7G�}�- Fix sb flag comparisons properly this time (#428893) - Make 256-byte inodes for the [default] mkfs case. This will facilitate upgrades to ext4 later, and help xattr perf.^��_a_8Eric Sandeen <sandeen@redhat.com> 1.40.4-6G�,A- Completely clobber e2fsck.static build.���^a�Q8Eric Sandeen <sandeen@redhat.com> 1.40.4-5G�,@- Ignore some primary/backup superblock flag differences (#428893) - Teach libblkid about ext4dev.� ��]a�38Eric Sandeen <sandeen@redhat.com> 1.40.4-4G��- Build e2fsck as a dynamically linked binary. - Re-fix uidd manpage default paths.s��\a�8Eric Sandeen <sandeen@redhat.com> 1.40.4-3G��@- New uuidd subpackage, and properly set up uuidd at install.V��[cM8Eric Sandeen <esandeen@redhat.com> 1.40.4-2Gz+B- Add new uidd files to specfileq��Zc�8Eric Sandeen <esandeen@redhat.com> 1.40.4-1Gz+A- New upstream version, drop several now-upstream patches.�*��Ye�q8Eric Sandeen <esandeen@redhat.com> 1.40.2-15Gz+@- Drop resize_inode removal patch from tune2fs; ostensibly was for old kernels which could not mount, but seems to be fine. - Drop pottcdate removal patch, and don't rebuild .po files, causes multilib problems and we generally shouldn't rebuild. - Drop multilib patch; wrapper header should take care of this now. - Drop ->open rename, Fedora seems ok with this now. � �1 � Z � b � I � � �i�[� 1�f ���4�` � � _��aa8Eric Sandeen <sandeen@redhat.com> 1.41.9-3J�0@- Drop defrag bits for now, not ready yet._��c_8Josef Bacik <josef@toxicpanda.com> 1.41.9-2J��@- Fix resize -m bug with flexbg (#519131)K��a98Eric Sandeen <sandeen@redhat.com> 1.41.9-1J�/@- New upstream release� ��a�!8Eric Sandeen <sandeen@redhat.com> 1.41.8-6Jyt@- Fix filefrag in fallback case - Add e2freefrag & e4defrag (experimental)Y�� Ua8Karel Zak <kzak@redhat.com> 1.41.8-5JlE@- disable fsck (replaced by util-linux-ng)f�� U{8Karel Zak <kzak@redhat.com> 1.41.8-4Jj�- disable libuuid and uuidd (replaced by util-linux-ng)��� ��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.8-3Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuilde�� am8Eric Sandeen <sandeen@redhat.com> 1.41.8-2J`g�- Address some package review concerns (#225714)b�� ag8Eric Sandeen <sandeen@redhat.com> 1.41.8-1JY�@- New upstream version, several resize fixes.K��a98Eric Sandeen <sandeen@redhat.com> 1.41.7-1JI�@- New upstream versionx��a�8Eric Sandeen <sandeen@redhat.com> 1.41.6-6JD�@- Split out sub-libraries (#225406) - Don't start uuidd by default�g��a�o8Eric Sandeen <sandeen@redhat.com> 1.41.6-5J:,@- Update journal backup blocks in sb after resize (#505339) - Fix memory leak in extent handling functions - Fix bug in inode writing in extent code, clobbered i_extra_isize etcg��U}8Karel Zak <kzak@redhat.com> 1.41.6-4J,�A- set BuildRequires: libblkid-devel (from util-linux-ng)�N��U�I8Karel Zak <kzak@redhat.com> 1.41.6-3J,�@- temporary use BuildRequires: e2fsprogs-devel (we cannot install new util-linux-ng with libblkid to buildroots without new e2fsprogs without libblkid).l��U�8Karel Zak <kzak@redhat.com> 1.41.6-2J'�@- disable libblkid (replaced by libblkid from util-linux-ng)K��a98Eric Sandeen <sandeen@redhat.com> 1.41.6-1J! �- New upstream versionK��a98Eric Sandeen <sandeen@redhat.com> 1.41.5-1I�- New upstream versionX�� aS8Eric Sandeen <sandeen@redhat.com> 1.41.4-8I��- Fix support for external journalsW��aQ8Eric Sandeen <sandeen@redhat.com> 1.41.4-7I��- Fix ext4 resize issues (#496982)z��~a�8Eric Sandeen <sandeen@redhat.com> 1.41.4-6I�@- ignore differing NEEDS_RECOVERY flag on fsck post-resize (#471925)k��}ay8Eric Sandeen <sandeen@redhat.com> 1.41.4-5I��A- fix a couple missed descriptions; obsolete e4fsprogs���|a�W8Eric Sandeen <sandeen@redhat.com> 1.41.4-4I��@- Edit summary & description to include ext4 (#487469) - Fix blkid null ptr deref in initrd (#486997)���{��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.4-3I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild���za�O8Eric Sandeen <sandeen@redhat.com> 1.41.4-2I��A- Fix debugfs "stat" segfault if no open fs (#482894) - Fix name of libext2fs info page (#481620)y��ya�8Eric Sandeen <sandeen@redhat.com> 1.41.4-1I��@- New upstream release - Dropped btrfs & resize fixes, upstream nowU��xaM8Eric Sandeen <sandeen@redhat.com> 1.41.3-4Iu��- resize2fs fixes, esp. for ext4���wa�U8Eric Sandeen <sandeen@redhat.com> 1.41.3-3Ih��- Remove conservative "don't change journal location" patch for F11 - Add btrfs recognition to blkidc��vai8Eric Sandeen <sandeen@redhat.com> 1.41.3-2H� A- Bump to revision 2, f10 was behind f9, oops.l��ua{8Eric Sandeen <sandeen@redhat.com> 1.41.3-1H� @- New upstream version (very minor fixes, ext4-related)t��ta� 8Eric Sandeen <sandeen@redhat.com> 1.41.2-2H�- Fix blkid to recognize ext4dev filesystems as ext4-mountable�R��sa�E8Eric Sandeen <sandeen@redhat.com> 1.41.2-1H�- New upstream version - Updated default dir hash (half_md4) for better perf & fewer collisions - Fixed ext4 online resizing with flex_bg - ext4 journal now in extents format and in middle of filesystem - fix unreadable e2image files - fix file descriptor leak in libcom_err (#464689) % � �'�, � � P � E � p � r �9�s#�t�v��,�] �2�E � � K��6a98Eric Sandeen <sandeen@redhat.com> 1.42.2-1Oq��- New upstream releaseK��5a98Eric Sandeen <sandeen@redhat.com> 1.42.1-1OB5�- New upstream release���4��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildO��3]E8Eric Sandeen <sandeen@redhat.com> 1.42-1N��@- New upstream point releasei��2sc8Eric Sandeen <sandeen@redhat.com> 1.42-0.9.WIP.1120N�=A- Build the right tarball for 1.42-WIP-1120]��1sK8Eric Sandeen <sandeen@redhat.com> 1.42-0.8.WIP.1120N�=@- New upstream snapshot releaseY��0sC8Eric Sandeen <sandeen@redhat.com> 1.42-0.7.WIP.1016N���- Several mmp-related fixesj��/se8Eric Sandeen <sandeen@redhat.com> 1.42-0.6.WIP.1016N��- Fix e2fsck / make check on big endian arch]��.sK8Eric Sandeen <sandeen@redhat.com> 1.42-0.5.WIP.1016N��- New upstream snapshot releaseb��-}K8Eric Sandeen <sandeen@redhat.com> 1.42-0.4.WIP.2011.1009N��@- New upstream snapshot release]��,sK8Eric Sandeen <sandeen@redhat.com> 1.42-0.3.WIP.0925N�i@- New upstream snapshot release��+s� 8Eric Sandeen <sandeen@redhat.com> 1.42-0.2.WIP.0702NA!A- Fix use of uninitialized memory via ext2fs_copy_generic_bmap()]��*sK8Eric Sandeen <sandeen@redhat.com> 1.42-0.1.WIP.0702NA!@- Test release for >16T support���)� �8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.41.14-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildL��(c98Eric Sandeen <sandeen@redhat.com> 1.41.14-1M9�- New upstream release[��'Ya8Dan Horák <dan[at]danny.cz> 1.41.13-2M�@- Add upstream fix for big-endian machinesL��&c98Eric Sandeen <sandeen@redhat.com> 1.41.13-1ME@- New upstream releasej��%cu8Eric Sandeen <sandeen@redhat.com> 1.41.12-7L�!�- Fix up UTF-8 formatting in e2fsck output (#655227)T��$cI8Eric Sandeen <sandeen@redhat.com> 1.41.12-6L�d�- Install e4defrag for testing`��#ca8Eric Sandeen <sandeen@redhat.com> 1.41.12-5L<U@- Relax fsck requirements for resize2fs -Pa��"cc8Eric Sandeen <sandeen@redhat.com> 1.41.12-4L;�- Add COPYING file to the static subpackagel��!cy8Eric Sandeen <sandeen@redhat.com> 1.41.12-3LG�- Reinstate static libs in dedicated package (#596377)Z�� cU8Eric Sandeen <sandeen@redhat.com> 1.41.12-2K��- Fix fsck thinko in 1.41.12 releaseL�� c98Eric Sandeen <sandeen@redhat.com> 1.41.12-1K�/�- New upstream versionL�� c98Eric Sandeen <sandeen@redhat.com> 1.41.11-1K�!@- New upstream versionx�� c�8Eric Sandeen <sandeen@redhat.com> 1.41.10-5K��@- Don't ask for confirmation of misaligned mkfs with -F (#569021)U�� cK8Eric Sandeen <sandeen@redhat.com> 1.41.10-4K��@- Fix for e2fsck -fD corruptiona��cc8Eric Sandeen <sandeen@redhat.com> 1.41.10-3KuB�- And drop virtual provides for static libsR��cE8Eric Sandeen <sandeen@redhat.com> 1.41.10-2KuB�- Drop static libs (#545144)L��c98Eric Sandeen <sandeen@redhat.com> 1.41.10-1Kr��- New upstream versiont��c�8Eric Sandeen <sandeen@redhat.com> 1.41.9-10Kn�@- Upstream version of resize2fs array fix, original was wrong�:��a�8Eric Sandeen <sandeen@redhat.com> 1.41.9-9KZ�- Fix up stray output & re-enable make check - Fix dlopen issues for newer libreadline - Fix access beyond end of array in resize2fs� ��a�a8Eric Sandeen <sandeen@redhat.com> 1.41.9-8J�U�- Fix up topology patch to build w/ new util-linux-ng - Fix endian swapping of backup journal blocks in sbZ��aW8Eric Sandeen <sandeen@redhat.com> 1.41.9-7J�U�- Re-enable "make check" during build���a�Q8Eric Sandeen <sandeen@redhat.com> 1.41.9-6J�2@- Add support for block discard (TRIM) at mkfs time - Add support for new blkid topology awarenessr��a�8Eric Sandeen <sandeen@redhat.com> 1.41.9-5J�T�- Allow superblock timestamp differences up to 24h (#522969)_��aa8Eric Sandeen <sandeen@redhat.com> 1.41.9-4J�1@- Fix install with --excludedocs (#515987) �1� � i � ( � n � T � � 1�b�I�6�\� � ��Tg�/8Lukas Czerner <lczerner@redhat.com> 1.42.9-12Z��@- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)�G��Sg�)8Lukas Czerner <lczerner@redhat.com> 1.42.9-11Z �- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969) - tune2fs: edit dire warning about check intervals (#1433233)� ��Rg�[8Lukas Czerner <lczerner@redhat.com> 1.42.9-10X�~@- libext2fs: don't ignore fsync errors (#1405049) - Fix nroff macro issue in chattr man page (#1429213)z��Qa�8Eric Sandeen <sandeen@redhat.com> 1.42.9-9W^�@- resize2fs: clear uninit BG if allocating from new group (#1262498)�G��Pa�/8Eric Sandeen <sandeen@redhat.com> 1.42.9-8V��- e4defrag: backwards-allocated files should be defragmented (#1176785) - tune2fs: allow removal of dirty journal with two "-f" options (#1212376) - mke2fs: prevent creation of filesystem with unsupported revision (#1212378) - libext2fs: prevent buffer overflows (#1293677)g��Oaq8Eric Sandeen <sandeen@redhat.com> 1.42.9-7T���- Don't require e2fsck for resize2fs -P (#1183492)_��Naa8Eric Sandeen <sandeen@redhat.com> 1.42.9-6TJ?@- Fix endian bug in extent code (#1081836)�+��Ma�w8Eric Sandeen <sandeen@redhat.com> 1.42.9-5T �- Various manpage updates for chattr and mount (#1053885) - Fix resize2fs -P hang on corrupted filesystems (#1104612)�y��Li� 8Lukas Czerner <lczerner@redhat.com> - 1.42.9-4S ��- Fix posisble use after free in some error paths (#997982) - Enable lazy_itable_init even if ext4 module is not loaded (#1071909) - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801) - Allow to resize ext4 file system past 16TB (#982871) - Disable altivec instructions for libext2fs on ppc (#1074604)M��K_?8Daniel Mach <dmach@redhat.com> - 1.42.9-3R�U�- Mass rebuild 2014-01-24F��Ja/8Eric Sandeen <sandeen@redhat.com> 1.42.9-2R��- Fix Source0 URLz��Ia�8Eric Sandeen <sandeen@redhat.com> 1.42.9-1R�@- New upstream release (#1051588) - Re-enable disabled tests for nowM��H_?8Daniel Mach <dmach@redhat.com> - 1.42.8-3R�k�- Mass rebuild 2013-12-27p��G[�8Stef walter <stefw@redhat.com> 1.42.8-2Q�*@- Interpackage dependencies should be for same arch (#986428)K��Fa98Eric Sandeen <sandeen@redhat.com> 1.42.8-1Q��- New upstream release\��Ea[8Eric Sandeen <sandeen@redhat.com> 1.42.7-2Q��- Tighten up inter-package dependenciesK��Da98Eric Sandeen <sandeen@redhat.com> 1.42.7-1P�@- New upstream releasex��Ca�8Eric Sandeen <sandeen@redhat.com> 1.42.6-2Pj�A- Switch back to gzipped tarball to make sf.net source URL correctK��Ba98Eric Sandeen <sandeen@redhat.com> 1.42.6-1Pj�@- New upstream releaseg��Aaq8Eric Sandeen <sandeen@redhat.com> 1.42.5-2P,�- Add explicit library deps to e2fsprogs (#848805)K��@a98Eric Sandeen <sandeen@redhat.com> 1.42.5-1Pw@- New upstream release���?��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.42.4-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK��>a98Eric Sandeen <sandeen@redhat.com> 1.42.4-1O�/@- New upstream releaseR��=aG8Eric Sandeen <sandeen@redhat.com> 1.42.3-2O�]@- Fixes for > 16T filesystemsK��<a98Eric Sandeen <sandeen@redhat.com> 1.42.3-1O��- New upstream release`��;ca8Eric Sandeen <sandeen@@redhat.com> 1.42.2-6O��- Add missing [options] tag to e2fsck.conf� ��:c�[8Eric Sandeen <sandeen@@redhat.com> 1.42.2-5O�O�- Add broken system clock config to e2fsck.conf to let boot continue even if system clock very wrong.n��9c}8Eric Sandeen <sandeen@@redhat.com> 1.42.2-4O��@- Handle 32-bit bitmaps in new find_first_zero functionsb��8k]8Richard W.M. Jones <rjones@redhat.com> 1.42.2-3Ou�@- Rebuild against new RPM (RHBZ#808250).e��7am8Eric Sandeen <sandeen@redhat.com> 1.42.2-2Or�@- Move files out of /sbin and /lib into /usr/... R � 2 � $ � � R��1�b�9�F��g��S � R i��peq<Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���oe�;<Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���ne�=<Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���m� �;Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��lk� ;Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��kcc;Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��jk�;Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��ik�i;Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��hkq;Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���gk�;Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��feq;Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���ee�;;Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���de�=;Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��ce�;Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033T��b}/:Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.0.0-0g��@- Initial package[��a{?9Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-1.0.4b�@- Add support centos7-elsc��`{O9Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-1.0.3a�c�- Fix mistake in /etc/els-releaseW��_{79Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-1.0.2a�c�- Add Centos8 support[��^{?9Darya Malyavkina <dmalyavkina@cloudlinux.com> - 1-1.0.1aS�- Add OracleLinux supportU��]mA9Daniil Leonov <dleonov@cloudlinux.com> - 1-1.0.0_�<�- Added default spec file.���\�� 8Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.45.6-19.tuxcare.els1e�,�- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulationw��[g� 8Lukas Czerner <lczerner@redhat.com> 1.45.6-19_c�- fix issues with meta_bg when resizing file system (#1849718)���Zg� 8Lukas Czerner <lczerner@redhat.com> 1.42.9-18^���- fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typo in ext4 man page (#1720130) - provide easy metod for creating compatible rhel6 fs (#1780277) - better handling of trivial dir link count problem (#1820048)���Yg� 8Lukas Czerner <lczerner@redhat.com> 1.42.9-17]҇�- fix resizing large file systems when block size != page size (#1771515)x��Xg� 8Lukas Czerner <lczerner@redhat.com> 1.42.9-16]��- Fix NULL pointer dereference when releasing memory (#1720903)n��Wgy8Lukas Czerner <lczerner@redhat.com> 1.42.9-15\v{�- set dir_nlink feature if large dir exists (#1683694)�v��Vg�8Lukas Czerner <lczerner@redhat.com> 1.42.9-14\s�- Various fixes and improvements (#1682935) - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635) - don't ignore fsync errors in filefrag (#1451185)�`��Ug�[8Lukas Czerner <lczerner@redhat.com> 1.42.9-13[!@- e2fsck: warn if checkinterval and broken_system_clock both set (#1365594) - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019) � z � 6 � � � � ���7��l�`�_�i{ � � a�� cc>Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�� k�>Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�� k�i>Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�� kq>Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���k�>Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��eq>Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���e�;>Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���e�=>Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��e�>Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033���}�!=<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function���� �=Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���� �=Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz�� k� =Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��cc=Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��~k�=Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��}k�i=Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��|kq=Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���{k�=Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��zeq=Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���ye�;=Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���x� �<Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���w� �<Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��vk� <Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��ucc<Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��tk�<Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��sk�i<Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��rkq<Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���qk�<Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518) � ��Q � P � Z l � � l�<�I��j��O�E� � i��(eqAPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���'e�;APetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���&e�=APetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��%e�APetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033���$}�!@<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function���#� �@Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���"� �@Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��!k� @Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�� cc@Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�� k�@Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�� k�i@Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�� kq@Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��� k�@Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��eq@Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���e�;@Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���� �?Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���� �?Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��k� ?Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��cc?Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��k�?Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��k�i?Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��kq?Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���k�?Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��eq?Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���e�;?Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���e�=?Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���� �>Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz�� k� >Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) � z � 6 � � � � ��!�>�r!�;�! � ���D� �CKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���C� �CKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��Bk� CJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��AccCTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��@k�CJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��?k�iCJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��>kqCJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���=k�CJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��<eqCPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���;e�;CPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���:� �BKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���9� �BKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��8k� BJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��7ccBTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��6k�BJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��5k�iBJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��4kqBJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���3k�BJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��2eqBPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���1e�;BPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���0e�=BPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���/� �AKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��.k� AJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��-ccATomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��,k�AJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��+k�iAJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��*kqAJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���)k�AJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518) � m�a � ` � j | � � |�S�`�� �f�e�o � �i��`k�iFJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��_kqFJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���^k�FJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��]eqFPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���\e�;FPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���[� �EKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���Z� �EKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��Yk� EJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��XccETomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��Wk�EJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��Vk�iEJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��UkqEJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���Tk�EJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��SeqEPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���Re�;EPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���Qe�=EPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���P� �DKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��Ok� DJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��NccDTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��Mk�DJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��Lk�iDJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��KkqDJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���Jk�DJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��IeqDPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���He�;DPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���Ge�=DPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��Fe�DPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033���E}�!C<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function �% �������������������{tmf_XQJC<5.' ������������������xjc\UNG@92+$ � � � � � � � � � � � � � � � � � � | u n g ` Y R K D = 6 / ( ! � � � � S L E > 7 0 ) " � � � � � � � � � � � � � � � � � � � z s l e ^ W P I B ; 4 - & � � � � � � � � � � � � � � � � � � ~ w p i b [ T M F ? 8 1 * # ������������������{tmf_XQJC<5.' ������������������xqjc\UNG@92+$ ������������������|ung`YRKD=6/(! �������������������yrkd]VOHA:3,% � � � � � � � � � � � � � � � y r k d ] V O H A : 3 , % � � � � � � � � � � � � � � � � � � } v o h a Zq ������������������}vohaZSLE>70)" ��������������� � c��r b��] a��A `��- _�� ^�� ]��m \��E [�� Z�� Y��z X��T W��- V�� U�� T��e S��> R�� Q�� P��s O��R N��* M�� L��u K��_ J��9 I�� H��p G��h F��J E��# D��~ C��e B��X A��7 @�� ?��j >��Z =��I <��& ;��~ :��X 9��O 8��2 7�� 6��g 5��B 4��" 3�� 2��V 1��4 0�� /��m .��G -��( ,�� +��^ *��: )�� (��q '��K &��+ %�� $��c #��? "�� !��u ��N ��8 ��# �� ��y ��d ��T ��H ��8 ��# �� ��| ��g ��S ��> ��* �� �� ��n ��Y ��E ��1 �� �� ��u ��a ��M ��8 ��$ �� ��| ��i ���S ���= ���' ��� ���t ���] ���? ��� ��� ���b �A �* � �l �N 1 킲{ 삲` 낲? ꂲ! 邲 肱f 炱E 悱/ 傱 䂰s グQ ₰3 Ⴐ � ߂�c ނ�B ݂�# ܂� ۂ�h ڂ�M ق�; �& ׂ� ւ�| Ղ�i Ԃ�V ӂ�? ҂�( т� Ђ� ς�Y �C ͂�6 ̂� ˂�u ʂ�O ɂ�7 Ȃ�* ǂ� Ƃ�i ł�C Ă�+ Â� � ���c ���E ��� ��� ���o ���R ���6 ��� ��� ���t ���` ���D ���( ��� ���p ���T ���6 ��� ���r ���X ���: ��� ��� ���\ ���= ���# ��� ���j ���L ���' ��� ���n ���P ���5 ��� ���r ���S ���9 ��� ��� ���b ���= ��� ��� ���f ���K ���+ ��� ���g ���L ���. ��� ���s ���N ���/ ��� ���u ���Y ���A ���) ��� ���p ���c ���I ��+ ~�� }��n ���7 ��� ���v ���_ ���R ���C ���7 ���) ��� ��� ���m ���Z ���J ���, ��� ���j ���S ���A ���* ��� ��� ���k ���J ���* ��� ��� ���g ���U ���L ���4 �� ~��s }��T |��4 {�� z��y y��a x��L w��1 v�� u�� t��m s��R r��> q��# p�� o��s n��^ m��F l��0 k�� i�� h��l g��Q f��= e��" d�� |��G {��" z�� y��t x��V w��E v��5 u�� t��| s��` r��? q�� p��w o��a n��J m��+ l�� k�� j��c i��G h��* g�� f��[ e��@ d��' c�� b��s `��[ ^��N ]��L Z��I X��D W��B T��? S��: R��* Q�� P��y N��s M��o L��i J��g I��d H��_ F��] E��Z D��U B��S A��P ?��K =��G <��A :��? 9��< 8��7 6��5 ���T 5��. 3��+ 2��( 1�� 0�� /�� .�� -�� ,�� +�� *��} )��y (��t '��p &��j %��f $��_ #��[ "��U !��Q ��K ��G ��A ��? ��= ��7 ��5 ��3 ��0 ��' �� �� ��k ��V ��@ ��$ �� ��g ��J ��, �� �� ��e ��N ��- �� ��u ��] ��C �� ��� ���o ���Z ���D ���( ��� � d � i���5v�d��� �O��tq�/HSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��si�QHPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���ri�)HPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��q� � GLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���ps� GMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���o{� GOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��nk� GVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���mu�=GOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��lu�oGOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ki�)GPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��jq�/GSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��ii�QGPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���hi�)GPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��gq�{GSebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.���f}�!F<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function���e� �FKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���d� �FKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��ck� FJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��bccFTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��ak�FJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643) � �= � � [ � � d ���,��J��S� � �5��q�{JSebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7����UILizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���� � ILinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � ILinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� IMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� IOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� IVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=IOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�oIOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)IPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��~q�/ISebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��}i�QIPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���|� � HLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��{� � HLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���zs� HMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���y{� HOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��xk� HVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���wu�=HOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��vu�oHOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ui�)HPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1 ^ �R ~ q � _ � M|o���7��U� � ^ ��� � � KLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L�� � � KLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� KMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� KOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� KVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=KOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�oKOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)KPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/KSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�QKPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)KPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��� � JLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� JMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� JOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� JVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=JOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�oJOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)JPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/JSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�QJPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� i�)JPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. � _� ~ � + l � Z ��3�'�&�0B�\�B� � i��6eqNPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���5e�;NPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���4e�=NPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���3� �MKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��2k� MJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��1ccMTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��0k�MJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��/k�iMJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��.kqMJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���-k�MJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��,eqMPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���+e�;MPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���*e�=MPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��)e�MPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033�7��(��ULLizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���'� � LLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��&� � LLinar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���%s� LMasahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���${� LOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��#k� LVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���"u�=LOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��!u�oLOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)LPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/LSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�QLPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well. � z � 6 � � � � ���7��l�`�_�i{ � � a��RccPTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��Qk�PJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��Pk�iPJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��OkqPJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���Nk�PJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��MeqPPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���Le�;PPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���Ke�=PPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s��Je�PPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033���I}�!O<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function���H� �OKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���G� �OKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��Fk� OJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��EccOTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��Dk�OJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��Ck�iOJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��BkqOJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���Ak�OJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��@eqOPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���?e�;OPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���>� �NKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���=� �NKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��<k� NJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��;ccNTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��:k�NJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��9k�iNJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��8kqNJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���7k�NJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518) ` ��Q � P � Z l � � l�<�I��j��O�m� � ` ~��oo�SJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��no�SJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��moYSJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b��loYSJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K��ks'SJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version���j}�!R<kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els3g�@- CVE-2024-39331: do not expand link abbrevs that contain unsafe function���i� �RKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���h� �RKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��gk� RJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��fccRTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��ek�RJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��dk�iRJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��ckqRJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���bk�RJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��aeqRPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���`e�;RPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���_� �QKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els2f�- CVE-2022-45939: fix ctags local command injection vulnerability���^� �QKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��]k� QJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a��\ccQTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}��[k�QJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i��Zk�iQJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l��YkqQJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)���Xk�QJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i��WeqQPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033���Ve�;QPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033���Ue�=QPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033���T� �PKoba Karaputadze <kkaraputadze@cloudlinux.com> - 1:24.3-23.1.tuxcare.els1f�X@- CVE-2024-48337: fix etags local command injection vulnerabilityz��Sk� PJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD� � a427354981de8351c4894b413617e7e11f886de0f6264bc17c16e5bbdd193fccD� � ea58cd43b0fd3883330e1f1030be908b5281b92b31593218b2e8dc8b48c09da9D� � b5ae1b2c2bb0caf6d1e43939a9e689f1782bea518edfc7a66c45e0cd0344e573D� � e051fd807c6c5990716bb055151c40584e3e20ef6263e0a8de91ee41a4aa5abfD� � ce6751ed98cbdd491e4d6e361d12a73689a83822d59c6c4c41e3736b3f9448e7D� � 1578aeadf93f2a52277f8cbe79ee6606a8d7445c88684f8380884d05151c0f8dD� � 0985513a4a735d0e16663c4b42cc7cc5870f3b6979ec938ce56119631391415eD� � c162ebf1ed486581a59530fa74325eb2011df25d74315178975281fcd963f780D� � f28053c045e9d48579e804fb9891820cd6722281130e4d53cb42f16b1d6eff3dD� � fb20746eabbcafe0887dacc29b5ff99dbe25880e1e77e63e6e7cb0406d1ad07bD�~ � d3ba1ff126c6c4f3f2acedc0c7f41aa82d44d3908d2dfe435ea513b269bcd154D�} � 347c97918e1b0dafa8266dac3ddcee718605add536464f814105f718198ac1f9D�| � 4e5622754463086809570ab3049edb18e27210b3a5ee81f41eff8d4dc07fb6c0D�{ � 7832afad3da5fd9b7f2c5ee0bd6ac85518617d93104d143f47e7712f1673286fD�z � a14ec667cecbc9760c1fa0a3fe127b5b3cc35ce4e4163de1e37c4030a79ee2c5D�y � 9bad7e55ea8db93c4d4eff9a22538b89fdaeedc834b8d4fa9b5519dca0d03e5aD�x � f74c72ec2d3ec78eb4355492d7ab090d1c38f35f7ec4d5893c6e9b8424858523D�w � 3eb1637413a5906970754e580d409313c672ab42fdadb6f0222b5af902fc0370D�v � aeb43cbb72a8865d023c77ba80aa2cec78305ca9c468861c4ed6f9a78b47dfc1D�u � 536010eb18620e18ef5e056311d30c79b4d09476d0aa9bb67f992f1e2902ff0fD�t � b4bfbc0a2a9a72ce6b69fa74ec12e0a9586a35ff43eb7fda58812d98cb80f09dD�s � 7c163ee8f771a6ca4ed1b8da57a4f1ed6e78236f016a99783acb749579ca60e0D�r � 7146889c197ace590ed60723e713023f723aeb6c08d67e561b580b8c6901885fD�q � c6618471144939167e0e053a55e6aa77620c183eab640328f8559334eff05e37D�p � 091892b6d377f31fac4c4cb9bd6f6bbe6ec6c8e9807ad94db7153f1673127933D�o � 1e22be779604d8d97e78990628a10fe47dfa990f7cf3708fc57eb574d0f5d310D�n � 9a72aee745c2816cd06ebce3d446a334cd0cb4e87c101de36fad7fd4296dc84dD�m � 8f2fceb007ea841a614f04927fabef58bb21778f19bf3d0280686d84b97a44e4D�l � cfd7ff75fe86733fed32c6763207c1bfa4cc207be59882926fd112194da6ca32D�k � 007ec4c4b4f3c4a07761af77bf50a42a8bc2652625e2968c4967050b8e801759D�j � d85cc7533204c8eb59ed962561248ab008a65650bfe3b63b1a2c30fee09dd4b7D�i � e6b9f9288366d2e035cb7bd03c6da700027852a3b3aff2b89b43d13a935f8b6fD�h � e8cce63b47c7ab72c2b1e35d01936a1ef5492a2df743b28307618d0088b7a254D�g � ad19d31dffb2c4de4c595356b1e4bbdeab7771bbcac5fd8892fdec206ebf9e19D�f � 0364689a1542360681cfc4887ae4b5a9cd6b6dd0429658e3f43ed3cb3bcbe39cD�e � 6ca0b442b555dbb5da201eb80c8d04f3307ce38a6af78fdd8d97f464696963cdD�d � fac642c8af9dca8faebaf780b3a5c06222ff8cd63faa0f83197106293766033fD�c � 83ccf7c2f94d61895b718b5fe40c3ac3b58eb86335fe4278201b749a4755e584D�b � e20d750afafb132014e4bb04a9ca2de38aadce9cb5625f127bf278cba1e0a5afD�a � 4b21a18bc93e8f30303280a52eaad83ac8276df30dec8f12ff8c3edabb55918eD�` � 7bf9cd00f13fe37ac283a4431ac701b27ab574564e46a72517301a19f72583d4D�_ � 877f7999b4e86f581798823d5c6276ccbb86f162afe66f81b88a6bba08be172eD�^ � d8a596c905c6cdfd3e6c81b9363f69eded36683eb43312443624159528ee6c56D�] � c7da983e463ebc370a1a99bff77afc7f2e633dbcc4cf243108327315608c2951D�\ � b713302cfc1bcc7b4800361bdda6d2db4a35bd54986f68c5efbf395876d877f8D�[ � ae2d96373978a1429bddd5b33be8f1b92e35000aec2f17743bb9fc5e4971ea2cD�Z � e6aa9fa0e6450ff1397879470cbc495e4fecb0df71b73fc853449c098e4447d0D�Y � cee56316975b8bfb87947d47243562c86872bd4fa720dfff47481e4f31b355feD�X � 860c20e6b241b7c76584aa6fe1e78f8cacd0616428f2cd08798b06b4d2db6fdaD�W � c2ac02ead999312f7f542bdd177a272fe95c3c61647f967c203bcafe2b244efdD�V � edf9d83dc3fefb9f588461dedb28b7b9e07af06302a8848020796e3dcf3f2d9aD�U � 0f9a6a34c7419f0cb635aecfce16aacd0b2fa7b501b0fef36a3503475b886252D�T � 23a978e1612ac6bc139e17123b8aa0d257185098c844101a6401957dc561969fD�S � 7d999c53fc1ac80a013150574673b6475113c038f8f81e470c863e9b9dcd955eD�R � cdc74a32f6e6bb4b8d35c81adeac6d0575331e688b1d7a346fd55d4721a79b0dD�Q � 041a4137cb48c9af12b978935f7a240d30cab630f9fe788bdd54bdd0ae770043 � z� � u � ` � � � S�>�r��M�(� � � ��o�'UJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283���o�UJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620~��o�UJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��o�UJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��oYUJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b��oYUJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K��s'UJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version�A�� ��iTKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%��s�YTJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766d��~sYTJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_��}s�MTJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543� ��|o�'TJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283���{o�TJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620~��zo�TJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��yo�TJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��xoYTJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b��woYTJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K��vs'TJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version�A��u��iSKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%��ts�YSJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766d��ssYSJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_��rs�MSJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543� ��qo�'SJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283���po�SJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620 � �4 � � u � � h � S����b�=�5�B � d�� sYWJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_�� s�MWJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543� �� o�'WJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283��� o�WJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620~��o�WJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��o�WJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��oYWJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b��oYWJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K��s'WJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version�A����iVKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%��s�YVJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766d��sYVJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_��s�MVJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543� ��o�'VJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283���o�VJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620~��o�VJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��o�VJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��oYVJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b�� oYVJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K�� s'VJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version�A�� ��iUKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%�� s�YUJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766d�� sYUJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_��s�MUJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543 & o V�A � u � 4 � � S���p)�a#��(��u�e.��#��X � o l��EY�YJoe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7��DS YJesse Keating <jkeating@redhat.com>C�q�- rebuilt:��CY YJoe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuildH��Bc1YIvana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��AS9YJeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��@K YElliot Lee <sopwith@redhat.com>@��- rebuiltc��?SwYJeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��>K YElliot Lee <sopwith@redhat.com>@Dw@- rebuilti��=Y}YJoe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��<K YElliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��;WAYMatt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^��:WiYMatt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\��9YcYJeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3��8K YElliot Lee <sopwith@redhat.com>>��@- rebuilt0��7E YTim Powers <timp@redhat.com>>.��- rebuiltD��6Y3YJeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��5m{YTrond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��4E3YTim Powers <timp@redhat.com>=@- automated rebuildC��3m YTrond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��2E3YTim Powers <timp@redhat.com><��- automated rebuild���1[�1YTrond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��0[ YTrond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��/K?YElliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��.G1YJeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11��-G YJeff Johnson <jbj@redhat.com>9�a�- Create.�A��,��iXKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%��+s�YXJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766d��*sYXJaroslav Škarvada <jskarvad@redhat.com> - 4.96.2-1e-%�- New version Resolves: rhbz#2244300�_��)s�MXJaroslav Škarvada <jskarvad@redhat.com> - 4.96.1-1e��- New version Resolves: rhbz#2241735 Resolves: rhbz#2241538 Resolves: rhbz#2241540 Resolves: rhbz#2241525 Resolves: rhbz#2241526 Resolves: rhbz#2241528 Resolves: rhbz#2241530 Resolves: rhbz#2241531 Resolves: rhbz#2241533 Resolves: rhbz#2241542 Resolves: rhbz#2241543� ��(o�'XJaroslav Škarvada <jskarvad@redhat.com> - 4.96-5c|��- Fixed exit on attempt to rewrite malformed address Resolves: rhbz#2143283���'o�XJaroslav Škarvada <jskarvad@redhat.com> - 4.96-4ca @- Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620~��&o�XJaroslav Škarvada <jskarvad@redhat.com> - 4.96-3cO�- Fixed use after free in regex handler Resolves: CVE-2022-3559�:��%o�XJaroslav Škarvada <jskarvad@redhat.com> - 4.96-2c:�- Fixed "tainted search query is not properly quoted" for greylisting, patch provided by Marcel Härry <mh+fedora@scrit.ch>b��$oYXJaroslav Škarvada <jskarvad@redhat.com> - 4.96-1b�{@- New version Resolves: rhbz#2119687b��#oYXJaroslav Škarvada <jskarvad@redhat.com> - 4.95-1b�U�- New version Resolves: rhbz#2100385K��"s'XJaroslav Škarvada <jskarvad@redhat.com> - 4.94.2-1`�7@- New version�A��!��iWKoba Karaputadze <kkaraputadze@cloudlinux.com> - 4.97.1-1.tuxcare.els1f��- CVE-2024-39929: fix incorrectly parsing MIME parses filenames that are specified using multiple parameters�%�� s�YWJaroslav Škarvada <jskarvad@redhat.com> - 4.97.1-1e�L@- New version Resolves: rhbz#2256145 - Fixed SMTP smuggling vulnerability Resolves: CVE-2023-51766 q �:�� � � p � K � k�m�5�x ���C��:�q j��c]{YJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��b]UYJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��a]]YJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��`[UYJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��_]?YDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��^]?YDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S��][OYJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)���\��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���[��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��Z[QYJoe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h��Y[yYJoe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M��X[CYJoe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)���W��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild���V��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��U]uYJoe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���T[�CYJoe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��S[�qYJoe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite���R��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild���Q��YFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde��P� ?YFedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]��OWgYJoe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W��NW[YJoe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9��MW YJoe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl��LW�YJoe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file���K[�[YJoe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E��JY�3YJoe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F��Iq YJesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuildf��HmcYJesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��GmsYJesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP��FYKYJoe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-util t Y � ��^ �X�]��J��c��X!��O�P � t f��mcZJesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��msZJesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP��YKZJoe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-utill�� Y�ZJoe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7��S ZJesse Keating <jkeating@redhat.com>C�q�- rebuilt:��~Y ZJoe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuildH��}c1ZIvana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��|S9ZJeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��{K ZElliot Lee <sopwith@redhat.com>@��- rebuiltc��zSwZJeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��yK ZElliot Lee <sopwith@redhat.com>@Dw@- rebuilti��xY}ZJoe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��wK ZElliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��vWAZMatt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^��uWiZMatt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\��tYcZJeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3��sK ZElliot Lee <sopwith@redhat.com>>��@- rebuilt0��rE ZTim Powers <timp@redhat.com>>.��- rebuiltD��qY3ZJeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��pm{ZTrond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��oE3ZTim Powers <timp@redhat.com>=@- automated rebuildC��nm ZTrond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��mE3ZTim Powers <timp@redhat.com><��- automated rebuild���l[�1ZTrond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��k[ ZTrond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��jK?ZElliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��iG1ZJeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11��hG ZJeff Johnson <jbj@redhat.com>9�a�- Create.�f��g��=YDmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���fe�9YTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��ee�YTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��de�aYTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 � ��M � � E � { � E � � e�P��s#�j� j�� ]{ZJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�� ]UZJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�� ]]ZJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��[UZJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��]?ZDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��]?ZDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S��[OZJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�����ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�����ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��[QZJoe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h��[yZJoe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M��[CZJoe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)�����ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�����ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��]uZJoe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���[�CZJoe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��[�qZJoe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite��� ��ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild��� ��ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde�� � ?ZFedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]�� WgZJoe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W�� W[ZJoe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9��W ZJoe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl��W�ZJoe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file���[�[ZJoe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E��Y�3ZJoe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F��q ZJesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuild � Y � �x �d�O� � ���+e�9[Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��*e�[Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��)e�a[Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��(]{[Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��']U[Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��&]][Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��%[U[Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��$]?[Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��#]?[Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�f��"��=ZDmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���!e�9ZTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�� e�ZTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"�� e�aZTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 d � � = � � ) �Q���f(����V � � d 0��CE ]Tim Powers <timp@redhat.com>>.��- rebuiltD��BY3]Jeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��Am{]Trond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��@E3]Tim Powers <timp@redhat.com>=@- automated rebuildC��?m ]Trond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��>E3]Tim Powers <timp@redhat.com><��- automated rebuild���=[�1]Trond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��<[ ]Trond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��;K?]Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��:G1]Jeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11��9G ]Jeff Johnson <jbj@redhat.com>9�a�- Create.�1��8� �W\Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��7��=\Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���6e�9\Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��5e�\Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��4e�a\Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��3]{\Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��2]U\Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��1]]\Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��0[U\Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��/]?\Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��.]?\Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�1��-� �W[Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��,��=[Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate & V �i�� � w @ � � n 3 � o � � I �p3�ws�.�0���;�H � V S��i[O]Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)���h��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���g��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��f[Q]Joe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h��e[y]Joe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M��d[C]Joe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)���c��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild���b��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��a]u]Joe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���`[�C]Joe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��_[�q]Joe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite���^��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild���]��]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde��\� ?]Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]��[Wg]Joe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W��ZW[]Joe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9��YW ]Joe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl��XW�]Joe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file���W[�[]Joe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E��VY�3]Joe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F��Uq ]Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuildf��Tmc]Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��Sms]Jesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP��RYK]Joe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-utill��QY�]Joe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7��PS ]Jesse Keating <jkeating@redhat.com>C�q�- rebuilt:��OY ]Joe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuildH��Nc1]Ivana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��MS9]Jeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��LK ]Elliot Lee <sopwith@redhat.com>@��- rebuiltc��KSw]Jeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��JK ]Elliot Lee <sopwith@redhat.com>@Dw@- rebuilti��IY}]Joe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��HK ]Elliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��GWA]Matt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^��FWi]Matt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\��EYc]Jeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3��DK ]Elliot Lee <sopwith@redhat.com>>��@- rebuilt k �`�L � 7t����<�t6��;���(�xA��6 � � k H�� c1^Ivana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��S9^Jeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��K ^Elliot Lee <sopwith@redhat.com>@��- rebuiltc��Sw^Jeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��K ^Elliot Lee <sopwith@redhat.com>@Dw@- rebuilti��Y}^Joe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��K ^Elliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��WA^Matt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^��Wi^Matt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\�� Yc^Jeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3��K ^Elliot Lee <sopwith@redhat.com>>��@- rebuilt0��~E ^Tim Powers <timp@redhat.com>>.��- rebuiltD��}Y3^Jeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��|m{^Trond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��{E3^Tim Powers <timp@redhat.com>=@- automated rebuildC��zm ^Trond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��yE3^Tim Powers <timp@redhat.com><��- automated rebuild���x[�1^Trond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��w[ ^Trond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��vK?^Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��uG1^Jeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11��tG ^Jeff Johnson <jbj@redhat.com>9�a�- Create.�f��s��=]Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���re�9]Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��qe�]Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��pe�a]Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��o]{]Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��n]U]Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��m]]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��l[U]Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��k]?]Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��j]?]Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27 !� ���Q � � � 4 � � , � b � ,����L��7��Z �Q�� j��*]{^Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��)]U^Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��(]]^Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��'[U^Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��&]?^Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��%]?^Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S��$[O^Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)���#��^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���"��^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��![Q^Joe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h�� [y^Joe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M�� [C^Joe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)��� ��^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild��� ��^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg�� ]u^Joe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���[�C^Joe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��[�q^Joe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite�����^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild�����^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde��� ?^Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]��Wg^Joe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W��W[^Joe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9��W ^Joe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl��W�^Joe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file���[�[^Joe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E��Y�3^Joe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F��q ^Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuildf��mc^Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��ms^Jesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP�� YK^Joe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-utill�� Y�^Joe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7�� S ^Jesse Keating <jkeating@redhat.com>C�q�- rebuilt:�� Y ^Joe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuild � Y � �x �d�O� � ���7e�9_Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��6e�_Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��5e�a_Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��4]{_Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��3]U_Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��2]]_Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��1[U_Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��0]?_Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��/]?_Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�f��.��=^Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���-e�9^Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��,e�^Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��+e�a^Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 d � � = � � ) �Q���f(����V � � d 0��OE aTim Powers <timp@redhat.com>>.��- rebuiltD��NY3aJeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��Mm{aTrond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��LE3aTim Powers <timp@redhat.com>=@- automated rebuildC��Km aTrond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��JE3aTim Powers <timp@redhat.com><��- automated rebuild���I[�1aTrond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��H[ aTrond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��GK?aElliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��FG1aJeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11��EG aJeff Johnson <jbj@redhat.com>9�a�- Create.�1��D� �W`Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��C��=`Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���Be�9`Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��Ae�`Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��@e�a`Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��?]{`Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��>]U`Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��=]]`Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��<[U`Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��;]?`Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��:]?`Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�1��9� �W_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��8��=_Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate & V �i�� � w @ � � n 3 � o � � I �p3�ws�.�0���;�H � V S��u[OaJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)���t��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���s��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��r[QaJoe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h��q[yaJoe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M��p[CaJoe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)���o��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild���n��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��m]uaJoe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���l[�CaJoe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��k[�qaJoe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite���j��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild���i��aFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde��h� ?aFedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]��gWgaJoe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W��fW[aJoe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9��eW aJoe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl��dW�aJoe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file���c[�[aJoe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E��bY�3aJoe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F��aq aJesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuildf��`mcaJesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��_msaJesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP��^YKaJoe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-utill��]Y�aJoe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7��\S aJesse Keating <jkeating@redhat.com>C�q�- rebuilt:��[Y aJoe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuildH��Zc1aIvana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��YS9aJeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��XK aElliot Lee <sopwith@redhat.com>@��- rebuiltc��WSwaJeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��VK aElliot Lee <sopwith@redhat.com>@Dw@- rebuilti��UY}aJoe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��TK aElliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��SWAaMatt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^��RWiaMatt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\��QYcaJeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3��PK aElliot Lee <sopwith@redhat.com>>��@- rebuilt k �`�L � 7t����<�t6��;���(�xA��6 � � k H��c1bIvana Varekova <varekova@redhat.com> 1.95.8A��@- update to 1.95.8D��S9bJeff Johnson <jbj@jbj.org> 1.95.7-4@�6@- add -fPIC (#125586).3��K bElliot Lee <sopwith@redhat.com>@��- rebuiltc��SwbJeff Johnson <jbj@jbj.org> 1.95.7-2@ɞ�- fix: malloc failure from dbus test suite (#124747).3��K bElliot Lee <sopwith@redhat.com>@Dw@- rebuilti��Y}bJoe Orton <jorton@redhat.com> 1.95.7-1@8��- update to 1.95.7, include COPYING file in main package3��K bElliot Lee <sopwith@redhat.com>@,�@- rebuiltJ��WAbMatt Wilson <msw@redhat.com> 1.95.5-6?hL�- rebuild again for #91211^�� WibMatt Wilson <msw@redhat.com> 1.95.5-5?f�@- rebuild to fix gzip'ed file md5sums (#91211)\�� YcbJeff Johnson <jbj@redhat.com> 1.95.5-4>��- rebuilt because of crt breakage on ppc64.3�� K bElliot Lee <sopwith@redhat.com>>��@- rebuilt0�� E bTim Powers <timp@redhat.com>>.��- rebuiltD�� Y3bJeff Johnson <jbj@redhat.com> 1.95.5-1=ϛ�- update to 1.95.5.r��m{bTrond Eivind Glomsrød <teg@redhat.com> 1,95.4-1=`�- 1.95.4. 1.95.3 was withdrawn by the expat developers.:��E3bTim Powers <timp@redhat.com>=@- automated rebuildC��m bTrond Eivind Glomsrød <teg@redhat.com> 1,95.3-1<�N�- 1.95.3:��E3bTim Powers <timp@redhat.com><��- automated rebuild���[�1bTrond Eivind Glomsrød <teg@redhat.com><� �- Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD:��[ bTrond Eivind Glomsrød <teg@redhat.com><�?@- 1.95.2C��K?bElliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.:��G1bJeff Johnson <jbj@redhat.com>9�y�- update to 1.95.11�� G bJeff Johnson <jbj@redhat.com>9�a�- Create.�f����=aDmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���~e�9aTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��}e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��|e�aaTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��{]{aJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��z]UaJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��y]]aJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��x[UaJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��w]?aDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��v]?aDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27 !� ���Q � � � 4 � � , � b � ,����L��7��Z �Q�� j��6]{bJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��5]UbJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��4]]bJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��3[UbJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��2]?bDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��1]?bDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S��0[ObJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)���/��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���.��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT��-[QbJoe Orton <jorton@redhat.com> - 2.1.0-3O�@- add -static subpackage (#722647)h��,[ybJoe Orton <jorton@redhat.com> - 2.1.0-1Ou�@- ship .pc file, move library back to libdir (#808399)M��+[CbJoe Orton <jorton@redhat.com> - 2.1.0-1OpZ@- update to 2.1.0 (#806602)���*��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild���)��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildg��(]ubJoe Orton <jorton@redhat.com> - 2.0.1-10Ko��- revised fix for CVE-2009-3560 regression (#544996)���'[�CbJoe Orton <jorton@redhat.com> - 2.0.1-9Kep�- drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996)�%��&[�qbJoe Orton <jorton@redhat.com> - 2.0.1-8K@- add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite���%��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild���$��bFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuilde��#� ?bFedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5G��- Autorebuild for GCC 4.3]��"WgbJoe Orton <jorton@redhat.com> 2.0.1-4G�,@- chmod 644 even more documentation (#429806)W��!W[bJoe Orton <jorton@redhat.com> 2.0.1-3G�e�- chmod 644 the documentation (#427950)9�� W bJoe Orton <jorton@redhat.com> 2.0.1-2F�%@- rebuildl�� W�bJoe Orton <jorton@redhat.com> 2.0.1-1F��@- update to 2.0.1 - fix the License tag - drop the .la file��� [�[bJoe Orton <jorton@redhat.com> 1.95.8-10E��- remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742)�E�� Y�3bJoe Orton <jorton@redhat.com> 1.95.8-9E�3@- regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244)F�� q bJesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1D��@- rebuildf��mcbJesse Keating <jkeating@redhat.com> - 1.95.8-8.2C�@- bump again for double-long bug on ppc(64)n��msbJesse Keating <jkeating@redhat.com> - 1.95.8-8.1C�- rebuilt for new gcc4.1 snapshot and glibc changesP��YKbJoe Orton <jorton@redhat.com> 1.95.8-8C�Q@- restore .la file for apr-utill��Y�bJoe Orton <jorton@redhat.com> 1.95.8-7C��- move library to /lib (#178743) - omit .la file (#170031)7��S bJesse Keating <jkeating@redhat.com>C�q�- rebuilt:��Y bJoe Orton <jorton@redhat.com> 1.95.8-6B-��- rebuild � Y � �x �d�O� � ���Ce�9cTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��Be�cTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��Ae�acTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��@]{cJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��?]UcJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��>]]cJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��=[UcJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��<]?cDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��;]?cDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�f��:��=bDmitrii Samoilov <dsamoilov@cloudlinux.com> 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���9e�9bTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��8e�bTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��7e�abTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 N � � = � � ) �Q���=�| �Y � N [��YoKeDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R��X]KeDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R��W]KeDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m��Vc{eKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R��UcEeKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X��T[YeDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X��S[YeDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a��R[keDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z��Q[]eDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)�1��P� �WdPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��O��=dDmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate���Ne�9dTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>��Me�dTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315�"��Le�adTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822j��K]{dJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W��J]UdJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[��I]]dJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V��H[UdJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L��G]?dDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L��F]?dDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27�1��E� �WcPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.0-15.tuxcare.els2f�@- CVE-2024-45490: Reject negative length for XML_ParseBuffer in xmlparse.c - CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms�h��D��=cDmitrii Samoilov <dsamoilov@cloudlinux.com> - 2.1.0-15.tuxcare.els1e �@- CVE-2022-23990: lib: prevent integer overflow in function doProlog - CVE-2022-43680: fix overeager DTD destruction in XML_ExternalEntityParserCreate ' { ���< � � . � g � c � S � � 6�o�dc�D��!�u��9 � { W�� eMiOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��_ciOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��~_QiOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~��}_� iOndrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)�-��|��?hVladimir D. Seleznev <vseleznev@cloudlinux.com> - 1.0.9-13.tuxcare.els1f�@- CVE-2024-42472: access to files outside sandbox for apps using persistent directoriesK��{e5hKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[��zoKhDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R��y]KhDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R��x]KhDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m��wc{hKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R��vcEhKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X��u[YhDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X��t[YhDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a��s[khDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z��r[]hDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)�-��q��?gVladimir D. Seleznev <vseleznev@cloudlinux.com> - 1.0.9-13.tuxcare.els1f�@- CVE-2024-42472: access to files outside sandbox for apps using persistent directoriesK��pe5gKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[��ooKgDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R��n]KgDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R��m]KgDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m��lc{gKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R��kcEgKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X��j[YgDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X��i[YgDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a��h[kgDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z��g[]gDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)�-��f��?fVladimir D. Seleznev <vseleznev@cloudlinux.com> - 1.0.9-13.tuxcare.els1f�@- CVE-2024-42472: access to files outside sandbox for apps using persistent directoriesK��ee5fKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[��doKfDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R��c]KfDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R��b]KfDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m��ac{fKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R��`cEfKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X��_[YfDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X��^[YfDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a��][kfDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z��\[]fDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)�-��[��?eVladimir D. Seleznev <vseleznev@cloudlinux.com> - 1.0.9-13.tuxcare.els1f�@- CVE-2024-42472: access to files outside sandbox for apps using persistent directoriesK��Ze5eKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462 f ��A � V � � T���:�O� �-�g f �|��e�kOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��emkOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��eMkOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��_ckOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)v��� ajPavel Kopylov <pkopylov@cloudlinux.com> - 2:2.2.0-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�'��� �EjLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���g�CjJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��gijJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��g�jFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�� ]EjOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�� e�jOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�� emjOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�� eMjOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�� _cjOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��_QjOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)�'��� �EiLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���g�CiJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��giiJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��g�iFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��]EiOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��e�iOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��emiOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199) n �,�- � � t �4�5�� n �d��(��9lAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.1.1-5.tuxcare.els4g��A- CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaved_decompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow�7��'� �elPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��&� alPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��%��ElLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���$c�ClJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��#cilJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��"g�lFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��!]ElOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�� e�lOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�� emlOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�� eMlOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)�7�� � �ekPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt�� � akPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%����EkLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���c�CkJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��cikJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��g�kFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��]EkOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286) � ~$�f � � � & � #w��8�rq �3� � � V��?_QoOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)�'��>� �EnLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���=g�CnJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��<ginJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��;g�nFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��:]EnOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��9e�nOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��8emnOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��7eMnOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��6_cnOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��5_QnOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~��4_� nOndrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)�'��3� �EmLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���2g�CmJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��1gimJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��0g�mFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��/]EmOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��.e�mOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��-emmOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��,eMmOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��+_cmOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��*_QmOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~��)_� mOndrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810) � �B� � � � � S� �VU�~�X � � W��VeMqOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��U_cqOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)v��T� apPavel Kopylov <pkopylov@cloudlinux.com> - 2:2.2.0-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�'��S� �EpLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���Rg�CpJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��QgipJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��Pg�pFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��O]EpOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��Ne�pOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��MempOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��LeMpOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��K_cpOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��J_QpOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)v��I� aoPavel Kopylov <pkopylov@cloudlinux.com> - 2:2.2.0-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�'��H� �EoLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���Gg�CoJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��FgioJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��Eg�oFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��D]EoOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��Ce�oOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��BemoOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��AeMoOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��@_coOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041) D ��A � X � �c �:9�e�f�D t��i� arPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��h��ErLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���gc�CrJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��fcirJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��eg�rFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��d]ErOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��ce�rOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��bemrOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��aeMrOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��`_crOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)�7��_� �eqPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��^� aqPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��]��EqLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���\c�CqJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��[ciqJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��Zg�qFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��Y]EqOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��Xe�qOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��WemqOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199) � �i � � � ) � *��c��I�`� ���|c�CtJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��{citJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��zg�tFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��y]EtOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��xe�tOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��wemtOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��veMtOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)�d��u��9sAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.1.1-5.tuxcare.els4g��A- CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaved_decompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow�7��t� �esPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��s� asPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��r��EsLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���qc�CsJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��pcisJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��og�sFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��n]EsOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��me�sOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��lemsOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��keMsOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)�7��j� �erPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelog � V � � 9 � ]��43�_�\�.�q � g��emvOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��eMvOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��_cvOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�� _QvOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�� _� vOndrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)�'�� � �EuLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data��� g�CuJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�� giuJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��g�uFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��]EuOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��e�uOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��emuOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��eMuOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��_cuOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��_QuOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~��_� uOndrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)�d�� ��9tAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.1.1-5.tuxcare.els4g��A- CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaved_decompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow�7��� �etPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��~� atPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��}��EtLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data w ��+ � ( | " � d���$�!u��>�x w �|��&e�xOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��%emxOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��$eMxOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��#_cxOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��"_QxOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)v��!� awPavel Kopylov <pkopylov@cloudlinux.com> - 2:2.2.0-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�'�� � �EwLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data��� g�CwJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�� giwJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�� g�wFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�� ]EwOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��e�wOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��emwOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��eMwOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��_cwOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V��_QwOndrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)�'��� �EvLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���g�CvJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��givJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��g�vFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��]EvOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��e�vOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623) ~ �,�) } � E ����\��E� ~ �|��;e�zOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��:emzOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��9eMzOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��8_czOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)�7��7� �eyPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��6� ayPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��5��EyLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���4c�CyJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��3ciyJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��2g�yFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��1]EyOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��0e�yOndrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��/emyOndrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��.eMyOndrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_��-_cyOndrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)v��,� axPavel Kopylov <pkopylov@cloudlinux.com> - 2:2.2.0-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�'��+� �ExLinar Nadeev <lnadeev@cloudlinux.com> - 2:2.2.0-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���*g�CxJan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf��)gixJan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��(g�xFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��']ExOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286) n �,�- � � t �4�5�� n �d��M��9{Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.1.1-5.tuxcare.els4g��A- CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaved_decompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow�7��L� �e{Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��K� a{Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��J��E{Linar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���Ic�C{Jan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��Hci{Jan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��Gg�{Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��F]E{Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��Ee�{Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��Dem{Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��CeM{Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)�7��B� �ezPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��A� azPavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��@��EzLinar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���?c�CzJan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��>cizJan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��=g�zFelipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��<]EzOndrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286) ? �:9 � e � f � D�7�=��i �u�4�g � ? m��hO� }Preston Brown <pbrown@redhat.com>8��- revert spaces patch, fix up some foundry names to match X onesd��gQ{}Nalin Dahyabhai <nalin@redhat.com>8���- add defattr, ftmetric, ftsbit, ftstrtto per bug #9174K��fSG}Cristian Gafton <gafton@redhat.com>8� @- fix description and summaryt��eO�}Preston Brown <pbrown@redhat.com>8|l�- make ttmkfdir replace spaces in family names with underscores (#7613)Q��d]I}Bernhard Rosenkraenzer <bero@redhat.com>8{@- 1.3.1 - handle RPM_OPT_FLAGSN��cOQ}Preston Brown <pbrown@redhat.com>8)^@- fix a path for ttmkfdir Makefile�j��bO�}Preston Brown <pbrown@redhat.com>7��- newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin - freetype utilities moved to subpkg, X dependency removed from main pkg - libttf.so symlink moved to devel pkg<��aO-}Preston Brown <pbrown@redhat.com>6�0�- strip binariese��`S{}Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 5)G��_S?}Cristian Gafton <gafton@redhat.com>6��- fixed the doc file listQ��^OW}Preston Brown <pbrown@redhat.com>6��- Injected new description and group.<��]O-}Preston Brown <pbrown@redhat.com>6� @- added ttmkfdir;��\O+}Preston Brown <pbrown@redhat.com>6��- update to 1.2���[S�c}Cristian Gafton <gafton@redhat.com>6���- call libtoolize to sanitize config.sub and get ARM support - dispoze of the patch (not necessary anymore)W��ZOc}Preston Brown <pbrown@redhat.com>6-�- post/postun sections for ldconfig action.d��YO}}Preston Brown <pbrown@redhat.com>6,{@- initial RPM, includes normal and development packages.�d��X��9|Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.1.1-5.tuxcare.els4g��A- CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaved_decompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow�7��W� �e|Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els3g��@- CVE-2024-32660: fix a bug when a malicious server can crash the FreeRDP client by sending invalid huge allocation size - CVE-2024-32661: fix possible incorrect access - CVE-2024-32659: fix out-of-bounds read - fix typos in changelogt��V� a|Pavel Kopylov <pkopylov@cloudlinux.com> - 2.1.1-5.tuxcare.els2f��- CVE-2021-41159: fix client out of memory�%��U��E|Linar Nadeev <lnadeev@cloudlinux.com> - 2.1.1-5.tuxcare.els1f��@- CVE-2023-39352: add bound check in gdi_SolidFill - CVE-2023-39353: check indices are within range - CVE-2023-39356: fix checks for multi opaque rect - CVE-2023-40181: fix cBitsRemaining calculation - CVE-2023-40186: fix integer multiplications - CVE-2023-40188: fix input length validation - CVE-2023-40567: fix missing bounds checks - CVE-2023-40569: fix missing destination checks - CVE-2024-22211: check resolution for overflow - CVE-2023-39351: free content of currentMessage on fail - CVE-2023-39350: fix possible out of bound read - CVE-2023-40589: properly verify all offsets while decoding data���Tc�C|Jan Grulich <jgrulich@redhat.com> - 2.1.1-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscand��Sci|Jan Grulich <jgrulich@redhat.com> - 2.1.1-4a�@- Refactored RPC gateway parser (rhbz#2017944)}��Rg�|Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O��Q]E|Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|��Pe�|Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g��Oem|Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W��NeM|Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254) � �f�� � > q \ � 4 � A�� ��Vq���V � ���a�)}Nalin Dahyabhai <nalin@redhat.com> 2.0.9-2<��@- use "libtool install" instead of "install" to install some binaries (#62005)Q��cC}Mike A. Harris <mharris@redhat.com> 2.0.9-1<��@- Updated to freetype 2.0.9a��cc}Mike A. Harris <mharris@redhat.com> 2.0.8-4<x�- Added proper docs+demos source for 2.0.8.� ��c�1}Mike A. Harris <mharris@redhat.com> 2.0.8-3<w�@- Added compat patch so 2.x works more like 1.x - Rebuilt with new build toolchain��� c�/}Mike A. Harris <mharris@redhat.com> 2.0.8-2<v2�- Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7 on the freetype website. Munged specfile to deal with the problem by using {oldversion} instead of version where appropriate. <sigh>�A��U�/}Tim Powers <timp@redhat.com> 2.0.6-3<[�- bumping release so that we don't collide with another build of freetype, make sure to change the release requirement in the XFree86 package�`��~c�_}Mike A. Harris <mharris@redhat.com> 2.0.6-2<Z�@- Made ttmkfdir inclusion conditional, and set up a define to include ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new XFree86-font-utils package.Y��}cS}Mike A. Harris <mharris@redhat.com> 2.0.6-1<Ek@- Updated freetype to version 2.0.6B��|U3}Tim Powers <timp@redhat.com> 2.0.5-4<<0�- automated rebuild�!��{[�i}Elliot Lee <sopwith@redhat.com> 2.0.5-3<t�- Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating font list). (ttmkfdir-iso10646.patch) - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch) - Undo fix for #24253, assume compiler was fixed.\��zmO}Bernhard Rosenkraenzer <bero@redhat.com> 2.0.5-2;�- Fix build with gcc 3.1 (#56079)Y��ycS}Mike A. Harris <mharris@redhat.com> 2.0.5-1;�h@- Updated freetype to version 2.0.5�J��xc�3}Mike A. Harris <mharris@redhat.com> 2.0.4-2;�}@- Added new subpackage freetype-demos, added demos to build - Disabled ftdump, ftlint in utils package favoring the newer utils in demos package.���wc�A}Mike A. Harris <mharris@redhat.com> 2.0.4-1;���- Updated source to 2.0.4 - Added freetype demo's back into src.rpm, but not building yet.t��vc�}Mike A. Harris <mharris@redhat.com> 2.0.3-7;zd@- Changed package to use {findlang} macro to fix bug (#50676)w��uc� }Mike A. Harris <mharris@redhat.com> 2.0.3-6;Q��- Changed freetype-devel to group Development/Libraries (#47625)i��tmi}Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-5;I��- Fix up FT1 headers to please Qt 3.0.0 beta 2�6��sm�}Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4;5�@- Add ft2build.h to -devel package, since it's included by all other freetype headers, the package is useless without it�/��ra�}Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3;1�- Change "Requires: freetype = name/ver" to "freetype = version/release", and move the requirements to the subpackages.]��qc[}Mike A. Harris <mharris@redhat.com> 2.0.3-2;-�@- Added "Requires: freetype = name/ver"�H��pc�/}Mike A. Harris <mharris@redhat.com> 2.0.3-1;&@- Updated to Freetype 2.0.3, minor specfile tweaks. - Freetype2 docs are is in a separate tarball now. Integrated it. - Built in new environment.[��oUe}Bill Nottingham <notting@redhat.com>:�_@- rebuild for C++ exception handling on ia64g��n]u}Bernhard Rosenkraenzer <bero@redhat.com>:i}�- Build ttmkfdir with -O0, workaround for Bug #24253�%��mQ�{}Nalin Dahyabhai <nalin@redhat.com>:h,@- libtool is used to build libttf, so use libtool to link ttmkfdir with it - fixup a paths for a couple of missing docsD��l]/}Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Update ttmkfdirh��k]w}Bernhard Rosenkraenzer <bero@redhat.com>:I�- Update to 2.0.1 and 1.4 - Mark locale files as such>��jM3}Prospector <bugzilla@redhat.com>9l]�- automatic rebuildT��iO]}Preston Brown <pbrown@redhat.com>9D�- move .la file to devel pkg - FHS paths � s5��# � Y � s � t � C���P�!����x � � E��#]1}Owen Taylor <otaylor@redhat.com> 2.1.7-1@ �- Upgrade to 2.1.7�'��"e�k}Florian La Roche <Florian.LaRoche@redhat.de>?p5�- allow compiling without the demos as that requires XFree86 (this allows bootstrapping XFree86 on new archs)=��!_ }Elliot Lee <sopwith@redhat.com> 2.1.4-4.1?3��- RebuiltG�� a1}Owen Taylor <otaylor@redhat.com> 2.1.4-4.0? �@- Bump for rebuildx�� ]�}Owen Taylor <otaylor@redhat.com> 2.1.4-3>���- Fix crash with non-format-0 hdmx tables (found by David Woodhouse)��� ]�U}Owen Taylor <otaylor@redhat.com> 2.1.4-1>�v�- Version 2.1.4 - Relibtoolize to get deplibs right for x86_64 - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781) - Relativize absolute symlinks to fix the -debuginfo package (#83521, Mike Harris)3�� K }Elliot Lee <sopwith@redhat.com>>��@- rebuiltI�� Y=}Jeremy Katz <katzj@redhat.com> 2.1.3-9>̻�- fix build with gcc 3.3h��M�}Owen Taylor <otaylor@redhat.com>>[Z�- Add a memleak fix for the gzip backend from Federic Crozat�>��[�#}Elliot Lee <sopwith@redhat.com> 2.1.3-7>K��- Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries on ppc64. - Use _smp_mflags (for freetype 2.x only)[��Mm}Owen Taylor <otaylor@redhat.com>>?�@- Switch to using %configure (should fix #82330)0��E }Tim Powers <timp@redhat.com>>.��- rebuilt���]�Y}Owen Taylor <otaylor@redhat.com> 2.1.3-4>o�- Make FreeType robust against corrupt fonts with recursive composite glyphs (#74782, James Antill)���]�3}Owen Taylor <otaylor@redhat.com> 2.1.3-3>)�- Add a patch to implement FT_LOAD_TARGET_LIGHT - Fix up freetype-1.4-libtool.patch�0��c�}Mike A. Harris <mharris@redhat.com> 2.1.3-2=�z@- Update to freetype 2.1.3 - Removed ttmkfdir sources and patches, as they have been moved from the freetype packaging to XFree86 packaging, and now to the ttmkfdir package - Removed patches that are now included in 2.1.3: freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch, freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch, freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch, freetype-2.1.2-leftright.patch - Conditionalized inclusion of freetype 1.4 library.\��eW}Florian La Roche <Florian.LaRoche@redhat.de>=��@- disable perl, it is not used at allu��]�}Elliot Lee <sopwith@redhat.com> 2.1.2-11=�- Instead of removing unpackaged file, include it in the package.�t��e�}Mike A. Harris <mharris@redhat.com> 2.1.2-10=�@- Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS - Cleaned up various _foodir macros throughtout specfile - Removed with_ttmkfdir build option as it is way obsolete[��Ue}Tim Powers <timp@redhat.com> 2.1.2-8=�V�- remove unpackaged files from the buildrootG��ME}Owen Taylor <otaylor@redhat.com>=l�@- Fix a bug with PCF metricsV��Mc}Owen Taylor <otaylor@redhat.com>=S��- Backport autohinter improvements from CVSV��Mc}Owen Taylor <otaylor@redhat.com>==E@- Fix from CVS for transformations (#68964)Y�� Mi}Owen Taylor <otaylor@redhat.com>=*�@- Add another bugfix for the postscript hinter��� M�=}Owen Taylor <otaylor@redhat.com>=)~�- Add support for BlueFuzz private dict value, fixing rendering glitch for Luxi Mono.Y�� Mi}Owen Taylor <otaylor@redhat.com>="�@- Add an experimental FT_Set_Hint_Flags() calli�� M�}Owen Taylor <otaylor@redhat.com>= D@- Update to 2.1.2 - Add a patch fixing freetype PS hinter bugw�� c� }Mike A. Harris <mharris@redhat.com> 2.1.1-2=@- Added ft rpm build time conditionalizations upon user requestsB��]+}Owen Taylor <otaylor@redhat.com> 2.1.1-1=�@- Version 2.1.1M��MQ}Owen Taylor <otaylor@redhat.com>=��- Add a fix for PCF character maps:��E3}Tim Powers <timp@redhat.com><��@- automated rebuild���c�/}Mike A. Harris <mharris@redhat.com> 2.1.0-2<��- Updated freetype to version 2.1.0 - Added libtool fix for freetype 1.4 (#64631) � ��m � d � s � U � t � q��.X��e��0�1�&K � �;��Bg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1E��- Update to 2.3.0. - Drop upstream patches. - Drop -fno-strict-aliasing, it should just work. - Fix typo in ftconfig.h generation.�V��Ai�E}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16E���- Backport binary-search fixes from HEAD - Add freetype-2.2.1-ttcmap.patch - Resolves: #208734 - Fix rendering issue with some Asian fonts. - Add freetype-2.2.1-fix-get-orientation.patch - Resolves: #207261 - Copy non-X demos even if not compiling with_xfree86. - Add freetype-2.2.1-zero-item-size.patch, to fix crasher. - Resolves #214048 - Add X11_PATH=/usr to "make"s, to find modern X. - Resolves #212199� ��@i�W}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10EO�- Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841 - Add freetype-2.2.1-memcpy-fix.patchc��?gc}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-9E �- Add BuildRequires: libX11-devel (#205355)���>g�C}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-8D�,@- Add freetype-composite.patch and freetype-more-composite.patch from upstream. (#131851)b��=i_}Matthias Clasen <mclasen@redhat.com> - 2.2.1-7D��- Require pkgconfig in the -devel packageh��<gm}Jesse Keating <jkeating@redhat.com> - 2.2.1-6D�- pass --disable-static to %configure. (#172628)S��;gC}Jesse Keating <jkeating@redhat.com> - 2.2.1-5D�Z@- don't package static libsn��:qo}Matthias Clasen <mclasen@redhat.com> - 2.2.1-4.fc6D�@- fix a problem with the multilib patch (#202366)O��9k7}Matthias Clasen <mclasen@redhat.com> - 2.2.1-3DȪ�- fix multilib issuesC��8k }Jesse Keating <jkeating@redhat.com> - 2.2.1-2.1D��@- rebuildU��7gG}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-2D�L�- Remove unused BuildRequires�Q��6g�=}Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1D�L�- Update to 2.2.1 - Remove FreeType 1, to move to extras - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid - Enable modules gxvalid and otvalida��5_g}Karsten Hopp <karsten@redhat.de> 2.1.10-6Dk@- add buildrequires libICE-devel, libSM-develh��4qc}Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2.1C�@- bump again for double-long bug on ppc(64)n��3ms}Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��2S }Jesse Keating <jkeating@redhat.com>C�q�- rebuilti��1im}Bill Nottingham <notting@redhat.com> 2.1.10-5C}�@- Remove references to obsolete /usr/X11R6 pathsW��0iI}Matthias Clasen <mclasen@redhat.com> 2.1.10-4CgX�- Switch requires to modular XO��/i9}Matthias Clasen <mclasen@redhat.com> 2.1.10-3CX�@- BuildRequire gettext� ��.c�1}Jason Vas Dias <jvdias@redhat.com> 2.1.10-2CL��- fix 'without_bytecode_interpreter 0' build: freetype-2.1.10-enable-ft2-bci.patcha��-i]}Matthias Clasen <mclasen@redhat.com> 2.1.10-1CFc@- Update to 2.1.10 - Add necessary fixes`��,ca}Kristian Høgsberg <krh@redhat.com> 2.1.9-4C�@- Fix freetype-config on 64 bit platforms.Q��+]I}Karsten Hopp <karsten@redhat.de> 2.1.9-3B�@- BuildRequires xorg-x11-devel?��*c }David Zeuthen <davidz@redhat.com> - 2.1.9-2B(M�- Rebuild�)��)a�s}Owen Taylor <otaylor@redhat.com> - 2.1.9-1A�- Upgrade to 2.1.9 - Since we are just using automake for aclocal, use it unversioned, instead of specifying 1.4.3��(K }Elliot Lee <sopwith@redhat.com>@��- rebuilt�M��']�?}Owen Taylor <otaylor@redhat.com> 2.1.7-4@��@- Add patch from freetype CVS to fix problem with eexec (#117743) - Add freetype-devel to buildrequires and -devel requires (Maxim Dzumanenko, #111108)���&c�;}Mike A. Harris <mharris@redhat.com> 2.1.7-3@O@- Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and SIGILL crashes in mkfontscale which have been traced into freetype and seem to be caused by aliasing issues in freetype macros (#118021)=��%_ }Elliot Lee <sopwith@redhat.com> 2.1.7-2.1@Dw@- rebuilt;��$[ }Elliot Lee <sopwith@redhat.com> 2.1.7-2@,�@- rebuilt ! � v(�� � ^ � � J � � � � R�=�e�:�F�c��) � ���ce�)}Matthias Clasen <mclasen@redhat.com> 2.4.2-2L[�A- Fix a thinko, we still want to disable the bytecode interpreter by default� ��be�/}Matthias Clasen <mclasen@redhat.com> 2.4.2-1L[�@- Update to 2.4.2 - Drop upstreamed patch, bytecode interpreter now on by default^��ae[}Behdad Esfahbod <behdad@redhat.com> 2.3.12-1K��@- Update to 2.3.12 - Drop mathlib patch���`e�Q}Behdad Esfahbod <behdad@redhat.com> 2.3.11-2K�@- Drop upstreamed patch. - Enable patented bytecode interpretter now that the patents are expired.�&��_e�i}Behdad Esfahbod <behdad@redhat.com> 2.3.11-1J�I@- Update to 2.3.11. - Add freetype-2.3.11-more-demos.patch - New demo programs ftmemchk, ftpatchk, and fttimero��^e}}Behdad Esfahbod <behdad@redhat.com> 2.3.10-1J��@- Drop freetype-2.3.9-aliasing.patch - Update to 2.3.10.l��]cy}Behdad Esfahbod <behdad@redhat.com> 2.3.9-6Jq�@- Add freetype-2.3.9-aliasing.patch - Resolves: 513582���\��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.9-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildU��[eI}Matthias Clasen <mclasen@redhat.com> 2.3.9-4J�@- Don't own /usr/lib/pkgconfig��Zg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-3I̿�- Disable subpixel hinting by default. Was turned on unintentionally.�#��Yg�a}Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2I� �- Add Provides: freetype-bytecode and freetype-subpixel if built with those options. - Resolves: #155210]��XgW}Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-1I�J�- Update to 2.3.9. - Resolves #489928s��Wk}Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-2.1I��- Preserve timestamp of FTL.TXT when converting to UTF-8.���V��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.8-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuildv��Ug�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-1Io%@- Update to 2.3.8 - Remove freetype-autohinter-ligature.patch�1��Tg�}}Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3I>]�- Add full source URL to Source lines. - Add docs to main and devel package. - rpmlint is happy now. - Resolves: #225770u��Sg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-2I9�- Add freetype-autohinter-ligature.patch - Resolves: #368561I��Rg/}Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-1H� @- Update to 2.3.7I��Qg/}Behdad Esfahbod <besfahbo@redhat.com> 2.3.6-1HNl�- Update to 2.3.6u��Ps{}Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.5-5H4�- fix license tag - add sparc64 to list of 64bit archese��O� ?}Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.3.5-4G�s@- Autorebuild for GCC 4.3I��N]9}Adam Jackson <ajax@redhat.com> - 2.3.5-3F�v�- Rebuild for build ID�:��Mg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2F�$@- Change spec file to permit enabling bytecode-interpreter and subpixel-rendering without editing spec file. - Resolves: 249986t��Lg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-1F�;@- Update to 2.3.5. - Drop freetype-2.3.4-ttf-overflow.patchv��KY�}Adam Jackson <ajax@redhat.com> 2.3.4-4F��@- Fix builds/unix/libtool to not emit rpath into binaries. (#225770)_��Jg[}Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-3F^��- Add freetype-2.3.4-ttf-overflow.patch]��IgW}Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-2F @- Add alpha to 64-bit archs (#236166)J��Hg1}Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-1F��- Update to 2.3.4.{��Gg�}Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-2F�- Include new demos ftgrid and ftdiff in freetype-demos. (#235478)J��Fg1}Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-1F�- Update to 2.3.3.J��Eg1}Behdad Esfahbod <besfahbo@redhat.com> 2.3.2-1E�L@- Update to 2.3.2.J��Dg1}Behdad Esfahbod <besfahbo@redhat.com> 2.3.1-1E�'�- Update to 2.3.1.���Cg�%}Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-2E��- Add without_subpixel_rendering. - Drop X11_PATH=/usr. Not needed anymore. e g � C � ( � � � # � M�A��`���.�Q � � ��q�+}Peter Robinson <pbrobinson@redhat.com> - 2.4.11-10S��- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: #1126099M��~_?}Daniel Mach <dmach@redhat.com> - 2.4.11-9R�U�- Mass rebuild 2014-01-24M��}_?}Daniel Mach <dmach@redhat.com> - 2.4.11-8R�k�- Mass rebuild 2013-12-27s��|a�}Marek Kasik <mkasik@redhat.com> - 2.4.11-7RM\@- Fix vertical size of emboldened glyphs - Resolves: #1010341b��{yO}Peter Robinson <pbrobinson@fedoraproject.org> 2.4.11-6Q��- Add aarch64 to 64 bit arch listp��za�}Marek Kasik <mkasik@redhat.com> - 2.4.11-5Q��A- Change encoding of "docs/tutorial/example3.cpp" to UTF-8X��yaS}Marek Kasik <mkasik@redhat.com> - 2.4.11-4Q��@- Package ftconfig.h as source file�A��xa�#}Marek Kasik <mkasik@redhat.com> - 2.4.11-3QHS@- Fix emboldening: - split out MSB function - fix integer overflows - fix broken emboldening at small sizes - Resolves: #891457���w��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.11-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��vaY}Marek Kasik <mkasik@redhat.com> - 2.4.11-1P�!@- Update to 2.4.11 - Resolves: #889177K��ua9}Marek Kasik <mkasik@redhat.com> - 2.4.10-3P��@- Update License field���t��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���s]�I}Marek Kasik <mkasik@redhat.com> 2.4.10-1O�j�- Update to 2.4.10 - Remove patches which are already included in upstream - Resolves: #832651m��r[�}Marek Kasik <mkasik@redhat.com> 2.4.9-1Ou�@- Update to 2.4.9 - Fixes various CVEs - Resolves: #806270���q��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.8-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild^��p[e}Marek Kasik <mkasik@redhat.com> 2.4.8-1N�T@- Update to 2.4.8 - Remove an unneeded patchp��o�I}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.7-2N��@- Rebuilt for glibc bug#747377n��n[�}Marek Kasik <mkasik@redhat.com> 2.4.7-1N� @- Update to 2.4.7 - Fixes CVE-2011-3256 - Resolves: #747262C��m[/}Marek Kasik <mkasik@redhat.com> 2.4.6-1N:��- Update to 2.4.6� ��l[�'}Marek Kasik <mkasik@redhat.com> 2.4.5-2N&�@- Add freetype-2.4.5-CVE-2011-0226.patch (Add better argument check for `callothersubr'.) - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthias Drochner - Resolves: #723469C��k[/}Marek Kasik <mkasik@redhat.com> 2.4.5-1N �@- Update to 2.4.5q��j[� }Marek Kasik <mkasik@redhat.com> 2.4.4-4Mv@- Fix autohinting fallback (#547532). - Ignore CFF-based OTFs.�!��i[�i}Marek Kasik <mkasik@redhat.com> 2.4.4-3Ma@- Enable bytecode interpreter (#547532). - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.���h��}Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild���g[�/}Marek Kasik <mkasik@redhat.com> 2.4.4-1L��@- Update to 2.4.4 - Remove freetype-2.4.3-CVE-2010-3855.patch - Resolves: #659020� ��f[�c}Marek Kasik <mkasik@redhat.com> 2.4.3-2L� �- Add freetype-2.4.3-CVE-2010-3855.patch (Protect against invalid `runcnt' values.) - Resolves: #651764W��e[W}Marek Kasik <mkasik@redhat.com> 2.4.3-1L��- Update to 2.4.3 - Resolves: #639906���d[�S}Marek Kasik <mkasik@redhat.com> 2.4.2-3L�d�- Add freetype-2.4.2-CVE-2010-3311.patch (Don't seek behind end of stream.) - Resolves: #638522 ~ � F � =�m�������&�H�h�� � ~ N��OQ~Preston Brown <pbrown@redhat.com>8)^@- fix a path for ttmkfdir Makefile�j��O�~Preston Brown <pbrown@redhat.com>7��- newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin - freetype utilities moved to subpkg, X dependency removed from main pkg - libttf.so symlink moved to devel pkg<��O-~Preston Brown <pbrown@redhat.com>6�0�- strip binariese��S{~Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 5)G��S?~Cristian Gafton <gafton@redhat.com>6��- fixed the doc file listQ��OW~Preston Brown <pbrown@redhat.com>6��- Injected new description and group.<��O-~Preston Brown <pbrown@redhat.com>6� @- added ttmkfdir;��O+~Preston Brown <pbrown@redhat.com>6��- update to 1.2���S�c~Cristian Gafton <gafton@redhat.com>6���- call libtoolize to sanitize config.sub and get ARM support - dispoze of the patch (not necessary anymore)W�� Oc~Preston Brown <pbrown@redhat.com>6-�- post/postun sections for ldconfig action.d�� O}~Preston Brown <pbrown@redhat.com>6,{@- initial RPM, includes normal and development packages.��� � �}Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size��� m�;}Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�� ]{}Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���]�1}Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��]o}Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��]� }Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��eU}Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��c{}Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���c�+}Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��c�}Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���c�M}Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��� c�Q}Marek Kasik <mkasik@redhat.com> - 2.4.11-11T��- Fixes CVE-2014-9657 - Check minimum size of `record_size'. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than `strncmp'. - Fixes CVE-2014-9660 - Check `_BDF_GLYPH_BITS'. - Fixes CVE-2014-9661 - Initialize `face->ttf_size'. - Always set `face->ttf_size' directly. - Exclusively use the `truetype' font driver for loading the font contained in the `sfnts' array. - Fixes CVE-2014-9663 - Fix order of validity tests. - Fixes CVE-2014-9664 - Add another boundary testing. - Fix boundary testing. - Fixes CVE-2014-9667 - Protect against addition overflow. - Fixes CVE-2014-9669 - Protect against overflow in additions and multiplications. - Fixes CVE-2014-9670 - Add sanity checks for row and column values. - Fixes CVE-2014-9671 - Check `size' and `offset' values. - Fixes CVE-2014-9673 - Fix integer overflow by a broken POST table in resource-fork. - Fixes CVE-2014-9674 - Fix integer overflow by a broken POST table in resource-fork. - Additional overflow check in the summation of POST fragment lengths. - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions - Resolves: #1197740 � �3�| � q � � I | g�?�L���*�a|� � ���3c�/~Mike A. Harris <mharris@redhat.com> 2.0.8-2<v2�- Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7 on the freetype website. Munged specfile to deal with the problem by using {oldversion} instead of version where appropriate. <sigh>�A��2U�/~Tim Powers <timp@redhat.com> 2.0.6-3<[�- bumping release so that we don't collide with another build of freetype, make sure to change the release requirement in the XFree86 package�`��1c�_~Mike A. Harris <mharris@redhat.com> 2.0.6-2<Z�@- Made ttmkfdir inclusion conditional, and set up a define to include ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new XFree86-font-utils package.Y��0cS~Mike A. Harris <mharris@redhat.com> 2.0.6-1<Ek@- Updated freetype to version 2.0.6B��/U3~Tim Powers <timp@redhat.com> 2.0.5-4<<0�- automated rebuild�!��.[�i~Elliot Lee <sopwith@redhat.com> 2.0.5-3<t�- Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating font list). (ttmkfdir-iso10646.patch) - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch) - Undo fix for #24253, assume compiler was fixed.\��-mO~Bernhard Rosenkraenzer <bero@redhat.com> 2.0.5-2;�- Fix build with gcc 3.1 (#56079)Y��,cS~Mike A. Harris <mharris@redhat.com> 2.0.5-1;�h@- Updated freetype to version 2.0.5�J��+c�3~Mike A. Harris <mharris@redhat.com> 2.0.4-2;�}@- Added new subpackage freetype-demos, added demos to build - Disabled ftdump, ftlint in utils package favoring the newer utils in demos package.���*c�A~Mike A. Harris <mharris@redhat.com> 2.0.4-1;���- Updated source to 2.0.4 - Added freetype demo's back into src.rpm, but not building yet.t��)c�~Mike A. Harris <mharris@redhat.com> 2.0.3-7;zd@- Changed package to use {findlang} macro to fix bug (#50676)w��(c� ~Mike A. Harris <mharris@redhat.com> 2.0.3-6;Q��- Changed freetype-devel to group Development/Libraries (#47625)i��'mi~Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-5;I��- Fix up FT1 headers to please Qt 3.0.0 beta 2�6��&m�~Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4;5�@- Add ft2build.h to -devel package, since it's included by all other freetype headers, the package is useless without it�/��%a�~Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3;1�- Change "Requires: freetype = name/ver" to "freetype = version/release", and move the requirements to the subpackages.]��$c[~Mike A. Harris <mharris@redhat.com> 2.0.3-2;-�@- Added "Requires: freetype = name/ver"�H��#c�/~Mike A. Harris <mharris@redhat.com> 2.0.3-1;&@- Updated to Freetype 2.0.3, minor specfile tweaks. - Freetype2 docs are is in a separate tarball now. Integrated it. - Built in new environment.[��"Ue~Bill Nottingham <notting@redhat.com>:�_@- rebuild for C++ exception handling on ia64g��!]u~Bernhard Rosenkraenzer <bero@redhat.com>:i}�- Build ttmkfdir with -O0, workaround for Bug #24253�%�� Q�{~Nalin Dahyabhai <nalin@redhat.com>:h,@- libtool is used to build libttf, so use libtool to link ttmkfdir with it - fixup a paths for a couple of missing docsD�� ]/~Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Update ttmkfdirh�� ]w~Bernhard Rosenkraenzer <bero@redhat.com>:I�- Update to 2.0.1 and 1.4 - Mark locale files as such>�� M3~Prospector <bugzilla@redhat.com>9l]�- automatic rebuildT�� O]~Preston Brown <pbrown@redhat.com>9D�- move .la file to devel pkg - FHS pathsm��O� ~Preston Brown <pbrown@redhat.com>8��- revert spaces patch, fix up some foundry names to match X onesd��Q{~Nalin Dahyabhai <nalin@redhat.com>8���- add defattr, ftmetric, ftsbit, ftstrtto per bug #9174K��SG~Cristian Gafton <gafton@redhat.com>8� @- fix description and summaryt��O�~Preston Brown <pbrown@redhat.com>8|l�- make ttmkfdir replace spaces in family names with underscores (#7613)Q��]I~Bernhard Rosenkraenzer <bero@redhat.com>8{@- 1.3.1 - handle RPM_OPT_FLAGS � r �/ � d � R � � � � H � � DK�r=���P� � ���Q]�U~Owen Taylor <otaylor@redhat.com> 2.1.4-1>�v�- Version 2.1.4 - Relibtoolize to get deplibs right for x86_64 - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781) - Relativize absolute symlinks to fix the -debuginfo package (#83521, Mike Harris)3��PK ~Elliot Lee <sopwith@redhat.com>>��@- rebuiltI��OY=~Jeremy Katz <katzj@redhat.com> 2.1.3-9>̻�- fix build with gcc 3.3h��NM�~Owen Taylor <otaylor@redhat.com>>[Z�- Add a memleak fix for the gzip backend from Federic Crozat�>��M[�#~Elliot Lee <sopwith@redhat.com> 2.1.3-7>K��- Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries on ppc64. - Use _smp_mflags (for freetype 2.x only)[��LMm~Owen Taylor <otaylor@redhat.com>>?�@- Switch to using %configure (should fix #82330)0��KE ~Tim Powers <timp@redhat.com>>.��- rebuilt���J]�Y~Owen Taylor <otaylor@redhat.com> 2.1.3-4>o�- Make FreeType robust against corrupt fonts with recursive composite glyphs (#74782, James Antill)���I]�3~Owen Taylor <otaylor@redhat.com> 2.1.3-3>)�- Add a patch to implement FT_LOAD_TARGET_LIGHT - Fix up freetype-1.4-libtool.patch�0��Hc�~Mike A. Harris <mharris@redhat.com> 2.1.3-2=�z@- Update to freetype 2.1.3 - Removed ttmkfdir sources and patches, as they have been moved from the freetype packaging to XFree86 packaging, and now to the ttmkfdir package - Removed patches that are now included in 2.1.3: freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch, freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch, freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch, freetype-2.1.2-leftright.patch - Conditionalized inclusion of freetype 1.4 library.\��GeW~Florian La Roche <Florian.LaRoche@redhat.de>=��@- disable perl, it is not used at allu��F]�~Elliot Lee <sopwith@redhat.com> 2.1.2-11=�- Instead of removing unpackaged file, include it in the package.�t��Ee�~Mike A. Harris <mharris@redhat.com> 2.1.2-10=�@- Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS - Cleaned up various _foodir macros throughtout specfile - Removed with_ttmkfdir build option as it is way obsolete[��DUe~Tim Powers <timp@redhat.com> 2.1.2-8=�V�- remove unpackaged files from the buildrootG��CME~Owen Taylor <otaylor@redhat.com>=l�@- Fix a bug with PCF metricsV��BMc~Owen Taylor <otaylor@redhat.com>=S��- Backport autohinter improvements from CVSV��AMc~Owen Taylor <otaylor@redhat.com>==E@- Fix from CVS for transformations (#68964)Y��@Mi~Owen Taylor <otaylor@redhat.com>=*�@- Add another bugfix for the postscript hinter���?M�=~Owen Taylor <otaylor@redhat.com>=)~�- Add support for BlueFuzz private dict value, fixing rendering glitch for Luxi Mono.Y��>Mi~Owen Taylor <otaylor@redhat.com>="�@- Add an experimental FT_Set_Hint_Flags() calli��=M�~Owen Taylor <otaylor@redhat.com>= D@- Update to 2.1.2 - Add a patch fixing freetype PS hinter bugw��<c� ~Mike A. Harris <mharris@redhat.com> 2.1.1-2=@- Added ft rpm build time conditionalizations upon user requestsB��;]+~Owen Taylor <otaylor@redhat.com> 2.1.1-1=�@- Version 2.1.1M��:MQ~Owen Taylor <otaylor@redhat.com>=��- Add a fix for PCF character maps:��9E3~Tim Powers <timp@redhat.com><��@- automated rebuild���8c�/~Mike A. Harris <mharris@redhat.com> 2.1.0-2<��- Updated freetype to version 2.1.0 - Added libtool fix for freetype 1.4 (#64631)���7a�)~Nalin Dahyabhai <nalin@redhat.com> 2.0.9-2<��@- use "libtool install" instead of "install" to install some binaries (#62005)Q��6cC~Mike A. Harris <mharris@redhat.com> 2.0.9-1<��@- Updated to freetype 2.0.9a��5cc~Mike A. Harris <mharris@redhat.com> 2.0.8-4<x�- Added proper docs+demos source for 2.0.8.� ��4c�1~Mike A. Harris <mharris@redhat.com> 2.0.8-3<w�@- Added compat patch so 2.x works more like 1.x - Rebuilt with new build toolchain ") �9�L � � p � g � v ! � X�w �t�1[�h��3�4�) � ��si�W~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10EO�- Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841 - Add freetype-2.2.1-memcpy-fix.patchc��rgc~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-9E �- Add BuildRequires: libX11-devel (#205355)���qg�C~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-8D�,@- Add freetype-composite.patch and freetype-more-composite.patch from upstream. (#131851)b��pi_~Matthias Clasen <mclasen@redhat.com> - 2.2.1-7D��- Require pkgconfig in the -devel packageh��ogm~Jesse Keating <jkeating@redhat.com> - 2.2.1-6D�- pass --disable-static to %configure. (#172628)S��ngC~Jesse Keating <jkeating@redhat.com> - 2.2.1-5D�Z@- don't package static libsn��mqo~Matthias Clasen <mclasen@redhat.com> - 2.2.1-4.fc6D�@- fix a problem with the multilib patch (#202366)O��lk7~Matthias Clasen <mclasen@redhat.com> - 2.2.1-3DȪ�- fix multilib issuesC��kk ~Jesse Keating <jkeating@redhat.com> - 2.2.1-2.1D��@- rebuildU��jgG~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-2D�L�- Remove unused BuildRequires�Q��ig�=~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1D�L�- Update to 2.2.1 - Remove FreeType 1, to move to extras - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid - Enable modules gxvalid and otvalida��h_g~Karsten Hopp <karsten@redhat.de> 2.1.10-6Dk@- add buildrequires libICE-devel, libSM-develh��gqc~Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2.1C�@- bump again for double-long bug on ppc(64)n��fms~Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��eS ~Jesse Keating <jkeating@redhat.com>C�q�- rebuilti��dim~Bill Nottingham <notting@redhat.com> 2.1.10-5C}�@- Remove references to obsolete /usr/X11R6 pathsW��ciI~Matthias Clasen <mclasen@redhat.com> 2.1.10-4CgX�- Switch requires to modular XO��bi9~Matthias Clasen <mclasen@redhat.com> 2.1.10-3CX�@- BuildRequire gettext� ��ac�1~Jason Vas Dias <jvdias@redhat.com> 2.1.10-2CL��- fix 'without_bytecode_interpreter 0' build: freetype-2.1.10-enable-ft2-bci.patcha��`i]~Matthias Clasen <mclasen@redhat.com> 2.1.10-1CFc@- Update to 2.1.10 - Add necessary fixes`��_ca~Kristian Høgsberg <krh@redhat.com> 2.1.9-4C�@- Fix freetype-config on 64 bit platforms.Q��^]I~Karsten Hopp <karsten@redhat.de> 2.1.9-3B�@- BuildRequires xorg-x11-devel?��]c ~David Zeuthen <davidz@redhat.com> - 2.1.9-2B(M�- Rebuild�)��\a�s~Owen Taylor <otaylor@redhat.com> - 2.1.9-1A�- Upgrade to 2.1.9 - Since we are just using automake for aclocal, use it unversioned, instead of specifying 1.4.3��[K ~Elliot Lee <sopwith@redhat.com>@��- rebuilt�M��Z]�?~Owen Taylor <otaylor@redhat.com> 2.1.7-4@��@- Add patch from freetype CVS to fix problem with eexec (#117743) - Add freetype-devel to buildrequires and -devel requires (Maxim Dzumanenko, #111108)���Yc�;~Mike A. Harris <mharris@redhat.com> 2.1.7-3@O@- Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and SIGILL crashes in mkfontscale which have been traced into freetype and seem to be caused by aliasing issues in freetype macros (#118021)=��X_ ~Elliot Lee <sopwith@redhat.com> 2.1.7-2.1@Dw@- rebuilt;��W[ ~Elliot Lee <sopwith@redhat.com> 2.1.7-2@,�@- rebuiltE��V]1~Owen Taylor <otaylor@redhat.com> 2.1.7-1@ �- Upgrade to 2.1.7�'��Ue�k~Florian La Roche <Florian.LaRoche@redhat.de>?p5�- allow compiling without the demos as that requires XFree86 (this allows bootstrapping XFree86 on new archs)=��T_ ~Elliot Lee <sopwith@redhat.com> 2.1.4-4.1?3��- RebuiltG��Sa1~Owen Taylor <otaylor@redhat.com> 2.1.4-4.0? �@- Bump for rebuildx��R]�~Owen Taylor <otaylor@redhat.com> 2.1.4-3>���- Fix crash with non-format-0 hdmx tables (found by David Woodhouse) � % e � � ? � r $ � ` � n�b��3�m�=�+�"�F�; � o��e}~Behdad Esfahbod <behdad@redhat.com> 2.3.10-1J��@- Drop freetype-2.3.9-aliasing.patch - Update to 2.3.10.l��cy~Behdad Esfahbod <behdad@redhat.com> 2.3.9-6Jq�@- Add freetype-2.3.9-aliasing.patch - Resolves: 513582�����~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.9-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildU��eI~Matthias Clasen <mclasen@redhat.com> 2.3.9-4J�@- Don't own /usr/lib/pkgconfig�� g�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-3I̿�- Disable subpixel hinting by default. Was turned on unintentionally.�#�� g�a~Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2I� �- Add Provides: freetype-bytecode and freetype-subpixel if built with those options. - Resolves: #155210]�� gW~Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-1I�J�- Update to 2.3.9. - Resolves #489928s�� k~Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-2.1I��- Preserve timestamp of FTL.TXT when converting to UTF-8.��� ��~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.8-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuildv��g�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-1Io%@- Update to 2.3.8 - Remove freetype-autohinter-ligature.patch�1��g�}~Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3I>]�- Add full source URL to Source lines. - Add docs to main and devel package. - rpmlint is happy now. - Resolves: #225770u��g�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-2I9�- Add freetype-autohinter-ligature.patch - Resolves: #368561I��g/~Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-1H� @- Update to 2.3.7I��g/~Behdad Esfahbod <besfahbo@redhat.com> 2.3.6-1HNl�- Update to 2.3.6u��s{~Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.5-5H4�- fix license tag - add sparc64 to list of 64bit archese��� ?~Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.3.5-4G�s@- Autorebuild for GCC 4.3I��]9~Adam Jackson <ajax@redhat.com> - 2.3.5-3F�v�- Rebuild for build ID�:�� g�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2F�$@- Change spec file to permit enabling bytecode-interpreter and subpixel-rendering without editing spec file. - Resolves: 249986t��g�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-1F�;@- Update to 2.3.5. - Drop freetype-2.3.4-ttf-overflow.patchv��~Y�~Adam Jackson <ajax@redhat.com> 2.3.4-4F��@- Fix builds/unix/libtool to not emit rpath into binaries. (#225770)_��}g[~Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-3F^��- Add freetype-2.3.4-ttf-overflow.patch]��|gW~Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-2F @- Add alpha to 64-bit archs (#236166)J��{g1~Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-1F��- Update to 2.3.4.{��zg�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-2F�- Include new demos ftgrid and ftdiff in freetype-demos. (#235478)J��yg1~Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-1F�- Update to 2.3.3.J��xg1~Behdad Esfahbod <besfahbo@redhat.com> 2.3.2-1E�L@- Update to 2.3.2.J��wg1~Behdad Esfahbod <besfahbo@redhat.com> 2.3.1-1E�'�- Update to 2.3.1.���vg�%~Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-2E��- Add without_subpixel_rendering. - Drop X11_PATH=/usr. Not needed anymore.�;��ug�~Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1E��- Update to 2.3.0. - Drop upstream patches. - Drop -fno-strict-aliasing, it should just work. - Fix typo in ftconfig.h generation.�V��ti�E~Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16E���- Backport binary-search fixes from HEAD - Add freetype-2.2.1-ttcmap.patch - Resolves: #208734 - Fix rendering issue with some Asian fonts. - Add freetype-2.2.1-fix-get-orientation.patch - Resolves: #207261 - Copy non-X demos even if not compiling with_xfree86. - Add freetype-2.2.1-zero-item-size.patch, to fix crasher. - Resolves #214048 - Add X11_PATH=/usr to "make"s, to find modern X. - Resolves #212199 � U�T � ; � E � ~ � c �^���|�I���9�i � s��/a�~Marek Kasik <mkasik@redhat.com> - 2.4.11-7RM\@- Fix vertical size of emboldened glyphs - Resolves: #1010341b��.yO~Peter Robinson <pbrobinson@fedoraproject.org> 2.4.11-6Q��- Add aarch64 to 64 bit arch listp��-a�~Marek Kasik <mkasik@redhat.com> - 2.4.11-5Q��A- Change encoding of "docs/tutorial/example3.cpp" to UTF-8X��,aS~Marek Kasik <mkasik@redhat.com> - 2.4.11-4Q��@- Package ftconfig.h as source file�A��+a�#~Marek Kasik <mkasik@redhat.com> - 2.4.11-3QHS@- Fix emboldening: - split out MSB function - fix integer overflows - fix broken emboldening at small sizes - Resolves: #891457���*��~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.11-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��)aY~Marek Kasik <mkasik@redhat.com> - 2.4.11-1P�!@- Update to 2.4.11 - Resolves: #889177K��(a9~Marek Kasik <mkasik@redhat.com> - 2.4.10-3P��@- Update License field���'��~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���&]�I~Marek Kasik <mkasik@redhat.com> 2.4.10-1O�j�- Update to 2.4.10 - Remove patches which are already included in upstream - Resolves: #832651m��%[�~Marek Kasik <mkasik@redhat.com> 2.4.9-1Ou�@- Update to 2.4.9 - Fixes various CVEs - Resolves: #806270���$��~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.8-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild^��#[e~Marek Kasik <mkasik@redhat.com> 2.4.8-1N�T@- Update to 2.4.8 - Remove an unneeded patchp��"�I~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.7-2N��@- Rebuilt for glibc bug#747377n��![�~Marek Kasik <mkasik@redhat.com> 2.4.7-1N� @- Update to 2.4.7 - Fixes CVE-2011-3256 - Resolves: #747262C�� [/~Marek Kasik <mkasik@redhat.com> 2.4.6-1N:��- Update to 2.4.6� �� [�'~Marek Kasik <mkasik@redhat.com> 2.4.5-2N&�@- Add freetype-2.4.5-CVE-2011-0226.patch (Add better argument check for `callothersubr'.) - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthias Drochner - Resolves: #723469C�� [/~Marek Kasik <mkasik@redhat.com> 2.4.5-1N �@- Update to 2.4.5q�� [� ~Marek Kasik <mkasik@redhat.com> 2.4.4-4Mv@- Fix autohinting fallback (#547532). - Ignore CFF-based OTFs.�!�� [�i~Marek Kasik <mkasik@redhat.com> 2.4.4-3Ma@- Enable bytecode interpreter (#547532). - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.�����~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild���[�/~Marek Kasik <mkasik@redhat.com> 2.4.4-1L��@- Update to 2.4.4 - Remove freetype-2.4.3-CVE-2010-3855.patch - Resolves: #659020� ��[�c~Marek Kasik <mkasik@redhat.com> 2.4.3-2L� �- Add freetype-2.4.3-CVE-2010-3855.patch (Protect against invalid `runcnt' values.) - Resolves: #651764W��[W~Marek Kasik <mkasik@redhat.com> 2.4.3-1L��- Update to 2.4.3 - Resolves: #639906���[�S~Marek Kasik <mkasik@redhat.com> 2.4.2-3L�d�- Add freetype-2.4.2-CVE-2010-3311.patch (Don't seek behind end of stream.) - Resolves: #638522���e�)~Matthias Clasen <mclasen@redhat.com> 2.4.2-2L[�A- Fix a thinko, we still want to disable the bytecode interpreter by default� ��e�/~Matthias Clasen <mclasen@redhat.com> 2.4.2-1L[�@- Update to 2.4.2 - Drop upstreamed patch, bytecode interpreter now on by default^��e[~Behdad Esfahbod <behdad@redhat.com> 2.3.12-1K��@- Update to 2.3.12 - Drop mathlib patch���e�Q~Behdad Esfahbod <behdad@redhat.com> 2.3.11-2K�@- Drop upstreamed patch. - Enable patented bytecode interpretter now that the patents are expired.�&��e�i~Behdad Esfahbod <behdad@redhat.com> 2.3.11-1J�I@- Update to 2.3.11. - Add freetype-2.3.11-more-demos.patch - New demo programs ftmemchk, ftpatchk, and fttimer i �^� � � �9�Q�X��7�;�\ � i ���E]�1Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��D]oMarek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��C]� Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��BeURichard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��Ac{Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���@c�+Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��?c�Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���>� �~Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���=m�;~Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��<]{~Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���;]�1~Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��:]o~Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��9]� ~Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��8eU~Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��7c{~Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���6c�+~Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��5c�~Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���4c�M~Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268���3c�Q~Marek Kasik <mkasik@redhat.com> - 2.4.11-11T��- Fixes CVE-2014-9657 - Check minimum size of `record_size'. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than `strncmp'. - Fixes CVE-2014-9660 - Check `_BDF_GLYPH_BITS'. - Fixes CVE-2014-9661 - Initialize `face->ttf_size'. - Always set `face->ttf_size' directly. - Exclusively use the `truetype' font driver for loading the font contained in the `sfnts' array. - Fixes CVE-2014-9663 - Fix order of validity tests. - Fixes CVE-2014-9664 - Add another boundary testing. - Fix boundary testing. - Fixes CVE-2014-9667 - Protect against addition overflow. - Fixes CVE-2014-9669 - Protect against overflow in additions and multiplications. - Fixes CVE-2014-9670 - Add sanity checks for row and column values. - Fixes CVE-2014-9671 - Check `size' and `offset' values. - Fixes CVE-2014-9673 - Fix integer overflow by a broken POST table in resource-fork. - Fixes CVE-2014-9674 - Fix integer overflow by a broken POST table in resource-fork. - Additional overflow check in the summation of POST fragment lengths. - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions - Resolves: #1197740� ��2q�+~Peter Robinson <pbrobinson@redhat.com> - 2.4.11-10S��- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: #1126099M��1_?~Daniel Mach <dmach@redhat.com> - 2.4.11-9R�U�- Mass rebuild 2014-01-24M��0_?~Daniel Mach <dmach@redhat.com> - 2.4.11-8R�k�- Mass rebuild 2013-12-27 ! b �� � T � K � { � � � �\����{&�r2C��$�m � � b >��fM3�Prospector <bugzilla@redhat.com>9l]�- automatic rebuildT��eO]�Preston Brown <pbrown@redhat.com>9D�- move .la file to devel pkg - FHS pathsm��dO� �Preston Brown <pbrown@redhat.com>8��- revert spaces patch, fix up some foundry names to match X onesd��cQ{�Nalin Dahyabhai <nalin@redhat.com>8���- add defattr, ftmetric, ftsbit, ftstrtto per bug #9174K��bSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summaryt��aO��Preston Brown <pbrown@redhat.com>8|l�- make ttmkfdir replace spaces in family names with underscores (#7613)Q��`]I�Bernhard Rosenkraenzer <bero@redhat.com>8{@- 1.3.1 - handle RPM_OPT_FLAGSN��_OQ�Preston Brown <pbrown@redhat.com>8)^@- fix a path for ttmkfdir Makefile�j��^O��Preston Brown <pbrown@redhat.com>7��- newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin - freetype utilities moved to subpkg, X dependency removed from main pkg - libttf.so symlink moved to devel pkg<��]O-�Preston Brown <pbrown@redhat.com>6�0�- strip binariese��\S{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 5)G��[S?�Cristian Gafton <gafton@redhat.com>6��- fixed the doc file listQ��ZOW�Preston Brown <pbrown@redhat.com>6��- Injected new description and group.<��YO-�Preston Brown <pbrown@redhat.com>6� @- added ttmkfdir;��XO+�Preston Brown <pbrown@redhat.com>6��- update to 1.2���WS�c�Cristian Gafton <gafton@redhat.com>6���- call libtoolize to sanitize config.sub and get ARM support - dispoze of the patch (not necessary anymore)W��VOc�Preston Brown <pbrown@redhat.com>6-�- post/postun sections for ldconfig action.d��UO}�Preston Brown <pbrown@redhat.com>6,{@- initial RPM, includes normal and development packages.���T���Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 2.8-14.1.tuxcare.els2e�,�- CVE-2025-27363: fix OOB write when parsing font subglyph structures���S� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���Rm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��Q]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���P]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��O]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��N]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��MeU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��Lc{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���Kc�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��Jc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���I��Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 2.8-14.1.tuxcare.els2e�,�- CVE-2025-27363: fix OOB write when parsing font subglyph structures���H� �Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���Gm�;Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��F]{Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479 K �L�7 � � � ; � S � Ev��M� E8�E�g � � K M��MQ�Owen Taylor <otaylor@redhat.com>=��- Add a fix for PCF character maps:��E3�Tim Powers <timp@redhat.com><��@- automated rebuild���c�/�Mike A. Harris <mharris@redhat.com> 2.1.0-2<��- Updated freetype to version 2.1.0 - Added libtool fix for freetype 1.4 (#64631)��� a�)�Nalin Dahyabhai <nalin@redhat.com> 2.0.9-2<��@- use "libtool install" instead of "install" to install some binaries (#62005)Q��cC�Mike A. Harris <mharris@redhat.com> 2.0.9-1<��@- Updated to freetype 2.0.9a��~cc�Mike A. Harris <mharris@redhat.com> 2.0.8-4<x�- Added proper docs+demos source for 2.0.8.� ��}c�1�Mike A. Harris <mharris@redhat.com> 2.0.8-3<w�@- Added compat patch so 2.x works more like 1.x - Rebuilt with new build toolchain���|c�/�Mike A. Harris <mharris@redhat.com> 2.0.8-2<v2�- Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7 on the freetype website. Munged specfile to deal with the problem by using {oldversion} instead of version where appropriate. <sigh>�A��{U�/�Tim Powers <timp@redhat.com> 2.0.6-3<[�- bumping release so that we don't collide with another build of freetype, make sure to change the release requirement in the XFree86 package�`��zc�_�Mike A. Harris <mharris@redhat.com> 2.0.6-2<Z�@- Made ttmkfdir inclusion conditional, and set up a define to include ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new XFree86-font-utils package.Y��ycS�Mike A. Harris <mharris@redhat.com> 2.0.6-1<Ek@- Updated freetype to version 2.0.6B��xU3�Tim Powers <timp@redhat.com> 2.0.5-4<<0�- automated rebuild�!��w[�i�Elliot Lee <sopwith@redhat.com> 2.0.5-3<t�- Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating font list). (ttmkfdir-iso10646.patch) - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch) - Undo fix for #24253, assume compiler was fixed.\��vmO�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.5-2;�- Fix build with gcc 3.1 (#56079)Y��ucS�Mike A. Harris <mharris@redhat.com> 2.0.5-1;�h@- Updated freetype to version 2.0.5�J��tc�3�Mike A. Harris <mharris@redhat.com> 2.0.4-2;�}@- Added new subpackage freetype-demos, added demos to build - Disabled ftdump, ftlint in utils package favoring the newer utils in demos package.���sc�A�Mike A. Harris <mharris@redhat.com> 2.0.4-1;���- Updated source to 2.0.4 - Added freetype demo's back into src.rpm, but not building yet.t��rc��Mike A. Harris <mharris@redhat.com> 2.0.3-7;zd@- Changed package to use {findlang} macro to fix bug (#50676)w��qc� �Mike A. Harris <mharris@redhat.com> 2.0.3-6;Q��- Changed freetype-devel to group Development/Libraries (#47625)i��pmi�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-5;I��- Fix up FT1 headers to please Qt 3.0.0 beta 2�6��om��Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4;5�@- Add ft2build.h to -devel package, since it's included by all other freetype headers, the package is useless without it�/��na��Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3;1�- Change "Requires: freetype = name/ver" to "freetype = version/release", and move the requirements to the subpackages.]��mc[�Mike A. Harris <mharris@redhat.com> 2.0.3-2;-�@- Added "Requires: freetype = name/ver"�H��lc�/�Mike A. Harris <mharris@redhat.com> 2.0.3-1;&@- Updated to Freetype 2.0.3, minor specfile tweaks. - Freetype2 docs are is in a separate tarball now. Integrated it. - Built in new environment.[��kUe�Bill Nottingham <notting@redhat.com>:�_@- rebuild for C++ exception handling on ia64g��j]u�Bernhard Rosenkraenzer <bero@redhat.com>:i}�- Build ttmkfdir with -O0, workaround for Bug #24253�%��iQ�{�Nalin Dahyabhai <nalin@redhat.com>:h,@- libtool is used to build libttf, so use libtool to link ttmkfdir with it - fixup a paths for a couple of missing docsD��h]/�Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Update ttmkfdirh��g]w�Bernhard Rosenkraenzer <bero@redhat.com>:I�- Update to 2.0.1 and 1.4 - Mark locale files as such �?�u � � 5 � � 1 8 � _*���l�=��� ����` =��!_ �Elliot Lee <sopwith@redhat.com> 2.1.7-2.1@Dw@- rebuilt;�� [ �Elliot Lee <sopwith@redhat.com> 2.1.7-2@,�@- rebuiltE�� ]1�Owen Taylor <otaylor@redhat.com> 2.1.7-1@ �- Upgrade to 2.1.7�'�� e�k�Florian La Roche <Florian.LaRoche@redhat.de>?p5�- allow compiling without the demos as that requires XFree86 (this allows bootstrapping XFree86 on new archs)=�� _ �Elliot Lee <sopwith@redhat.com> 2.1.4-4.1?3��- RebuiltG�� a1�Owen Taylor <otaylor@redhat.com> 2.1.4-4.0? �@- Bump for rebuildx��]��Owen Taylor <otaylor@redhat.com> 2.1.4-3>���- Fix crash with non-format-0 hdmx tables (found by David Woodhouse)���]�U�Owen Taylor <otaylor@redhat.com> 2.1.4-1>�v�- Version 2.1.4 - Relibtoolize to get deplibs right for x86_64 - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781) - Relativize absolute symlinks to fix the -debuginfo package (#83521, Mike Harris)3��K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltI��Y=�Jeremy Katz <katzj@redhat.com> 2.1.3-9>̻�- fix build with gcc 3.3h��M��Owen Taylor <otaylor@redhat.com>>[Z�- Add a memleak fix for the gzip backend from Federic Crozat�>��[�#�Elliot Lee <sopwith@redhat.com> 2.1.3-7>K��- Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries on ppc64. - Use _smp_mflags (for freetype 2.x only)[��Mm�Owen Taylor <otaylor@redhat.com>>?�@- Switch to using %configure (should fix #82330)0��E �Tim Powers <timp@redhat.com>>.��- rebuilt���]�Y�Owen Taylor <otaylor@redhat.com> 2.1.3-4>o�- Make FreeType robust against corrupt fonts with recursive composite glyphs (#74782, James Antill)���]�3�Owen Taylor <otaylor@redhat.com> 2.1.3-3>)�- Add a patch to implement FT_LOAD_TARGET_LIGHT - Fix up freetype-1.4-libtool.patch�0��c��Mike A. Harris <mharris@redhat.com> 2.1.3-2=�z@- Update to freetype 2.1.3 - Removed ttmkfdir sources and patches, as they have been moved from the freetype packaging to XFree86 packaging, and now to the ttmkfdir package - Removed patches that are now included in 2.1.3: freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch, freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch, freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch, freetype-2.1.2-leftright.patch - Conditionalized inclusion of freetype 1.4 library.\��eW�Florian La Roche <Florian.LaRoche@redhat.de>=��@- disable perl, it is not used at allu��]��Elliot Lee <sopwith@redhat.com> 2.1.2-11=�- Instead of removing unpackaged file, include it in the package.�t��e��Mike A. Harris <mharris@redhat.com> 2.1.2-10=�@- Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS - Cleaned up various _foodir macros throughtout specfile - Removed with_ttmkfdir build option as it is way obsolete[�� Ue�Tim Powers <timp@redhat.com> 2.1.2-8=�V�- remove unpackaged files from the buildrootG�� ME�Owen Taylor <otaylor@redhat.com>=l�@- Fix a bug with PCF metricsV�� Mc�Owen Taylor <otaylor@redhat.com>=S��- Backport autohinter improvements from CVSV�� Mc�Owen Taylor <otaylor@redhat.com>==E@- Fix from CVS for transformations (#68964)Y�� Mi�Owen Taylor <otaylor@redhat.com>=*�@- Add another bugfix for the postscript hinter���M�=�Owen Taylor <otaylor@redhat.com>=)~�- Add support for BlueFuzz private dict value, fixing rendering glitch for Luxi Mono.Y��Mi�Owen Taylor <otaylor@redhat.com>="�@- Add an experimental FT_Set_Hint_Flags() calli��M��Owen Taylor <otaylor@redhat.com>= D@- Update to 2.1.2 - Add a patch fixing freetype PS hinter bugw��c� �Mike A. Harris <mharris@redhat.com> 2.1.1-2=@- Added ft rpm build time conditionalizations upon user requestsB��]+�Owen Taylor <otaylor@redhat.com> 2.1.1-1=�@- Version 2.1.1 � � � 6 � � : � G � � , � ��8�s �J�J�� � ���?g�%�Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-2E��- Add without_subpixel_rendering. - Drop X11_PATH=/usr. Not needed anymore.�;��>g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1E��- Update to 2.3.0. - Drop upstream patches. - Drop -fno-strict-aliasing, it should just work. - Fix typo in ftconfig.h generation.�V��=i�E�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16E���- Backport binary-search fixes from HEAD - Add freetype-2.2.1-ttcmap.patch - Resolves: #208734 - Fix rendering issue with some Asian fonts. - Add freetype-2.2.1-fix-get-orientation.patch - Resolves: #207261 - Copy non-X demos even if not compiling with_xfree86. - Add freetype-2.2.1-zero-item-size.patch, to fix crasher. - Resolves #214048 - Add X11_PATH=/usr to "make"s, to find modern X. - Resolves #212199� ��<i�W�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10EO�- Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841 - Add freetype-2.2.1-memcpy-fix.patchc��;gc�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-9E �- Add BuildRequires: libX11-devel (#205355)���:g�C�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-8D�,@- Add freetype-composite.patch and freetype-more-composite.patch from upstream. (#131851)b��9i_�Matthias Clasen <mclasen@redhat.com> - 2.2.1-7D��- Require pkgconfig in the -devel packageh��8gm�Jesse Keating <jkeating@redhat.com> - 2.2.1-6D�- pass --disable-static to %configure. (#172628)S��7gC�Jesse Keating <jkeating@redhat.com> - 2.2.1-5D�Z@- don't package static libsn��6qo�Matthias Clasen <mclasen@redhat.com> - 2.2.1-4.fc6D�@- fix a problem with the multilib patch (#202366)O��5k7�Matthias Clasen <mclasen@redhat.com> - 2.2.1-3DȪ�- fix multilib issuesC��4k �Jesse Keating <jkeating@redhat.com> - 2.2.1-2.1D��@- rebuildU��3gG�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-2D�L�- Remove unused BuildRequires�Q��2g�=�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1D�L�- Update to 2.2.1 - Remove FreeType 1, to move to extras - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid - Enable modules gxvalid and otvalida��1_g�Karsten Hopp <karsten@redhat.de> 2.1.10-6Dk@- add buildrequires libICE-devel, libSM-develh��0qc�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2.1C�@- bump again for double-long bug on ppc(64)n��/ms�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��.S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilti��-im�Bill Nottingham <notting@redhat.com> 2.1.10-5C}�@- Remove references to obsolete /usr/X11R6 pathsW��,iI�Matthias Clasen <mclasen@redhat.com> 2.1.10-4CgX�- Switch requires to modular XO��+i9�Matthias Clasen <mclasen@redhat.com> 2.1.10-3CX�@- BuildRequire gettext� ��*c�1�Jason Vas Dias <jvdias@redhat.com> 2.1.10-2CL��- fix 'without_bytecode_interpreter 0' build: freetype-2.1.10-enable-ft2-bci.patcha��)i]�Matthias Clasen <mclasen@redhat.com> 2.1.10-1CFc@- Update to 2.1.10 - Add necessary fixes`��(ca�Kristian Høgsberg <krh@redhat.com> 2.1.9-4C�@- Fix freetype-config on 64 bit platforms.Q��']I�Karsten Hopp <karsten@redhat.de> 2.1.9-3B�@- BuildRequires xorg-x11-devel?��&c �David Zeuthen <davidz@redhat.com> - 2.1.9-2B(M�- Rebuild�)��%a�s�Owen Taylor <otaylor@redhat.com> - 2.1.9-1A�- Upgrade to 2.1.9 - Since we are just using automake for aclocal, use it unversioned, instead of specifying 1.4.3��$K �Elliot Lee <sopwith@redhat.com>@��- rebuilt�M��#]�?�Owen Taylor <otaylor@redhat.com> 2.1.7-4@��@- Add patch from freetype CVS to fix problem with eexec (#117743) - Add freetype-devel to buildrequires and -devel requires (Maxim Dzumanenko, #111108)���"c�;�Mike A. Harris <mharris@redhat.com> 2.1.7-3@O@- Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and SIGILL crashes in mkfontscale which have been traced into freetype and seem to be caused by aliasing issues in freetype macros (#118021) ! � �d�I � � � � � � X ��b�P�G�k�`�B�A�( � ���`[�S�Marek Kasik <mkasik@redhat.com> 2.4.2-3L�d�- Add freetype-2.4.2-CVE-2010-3311.patch (Don't seek behind end of stream.) - Resolves: #638522���_e�)�Matthias Clasen <mclasen@redhat.com> 2.4.2-2L[�A- Fix a thinko, we still want to disable the bytecode interpreter by default� ��^e�/�Matthias Clasen <mclasen@redhat.com> 2.4.2-1L[�@- Update to 2.4.2 - Drop upstreamed patch, bytecode interpreter now on by default^��]e[�Behdad Esfahbod <behdad@redhat.com> 2.3.12-1K��@- Update to 2.3.12 - Drop mathlib patch���\e�Q�Behdad Esfahbod <behdad@redhat.com> 2.3.11-2K�@- Drop upstreamed patch. - Enable patented bytecode interpretter now that the patents are expired.�&��[e�i�Behdad Esfahbod <behdad@redhat.com> 2.3.11-1J�I@- Update to 2.3.11. - Add freetype-2.3.11-more-demos.patch - New demo programs ftmemchk, ftpatchk, and fttimero��Ze}�Behdad Esfahbod <behdad@redhat.com> 2.3.10-1J��@- Drop freetype-2.3.9-aliasing.patch - Update to 2.3.10.l��Ycy�Behdad Esfahbod <behdad@redhat.com> 2.3.9-6Jq�@- Add freetype-2.3.9-aliasing.patch - Resolves: 513582���X���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.9-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildU��WeI�Matthias Clasen <mclasen@redhat.com> 2.3.9-4J�@- Don't own /usr/lib/pkgconfig��Vg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-3I̿�- Disable subpixel hinting by default. Was turned on unintentionally.�#��Ug�a�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2I� �- Add Provides: freetype-bytecode and freetype-subpixel if built with those options. - Resolves: #155210]��TgW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-1I�J�- Update to 2.3.9. - Resolves #489928s��Sk�Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-2.1I��- Preserve timestamp of FTL.TXT when converting to UTF-8.���R���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.8-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuildv��Qg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-1Io%@- Update to 2.3.8 - Remove freetype-autohinter-ligature.patch�1��Pg�}�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3I>]�- Add full source URL to Source lines. - Add docs to main and devel package. - rpmlint is happy now. - Resolves: #225770u��Og��Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-2I9�- Add freetype-autohinter-ligature.patch - Resolves: #368561I��Ng/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-1H� @- Update to 2.3.7I��Mg/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.6-1HNl�- Update to 2.3.6u��Ls{�Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.5-5H4�- fix license tag - add sparc64 to list of 64bit archese��K� ?�Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.3.5-4G�s@- Autorebuild for GCC 4.3I��J]9�Adam Jackson <ajax@redhat.com> - 2.3.5-3F�v�- Rebuild for build ID�:��Ig��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2F�$@- Change spec file to permit enabling bytecode-interpreter and subpixel-rendering without editing spec file. - Resolves: 249986t��Hg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-1F�;@- Update to 2.3.5. - Drop freetype-2.3.4-ttf-overflow.patchv��GY��Adam Jackson <ajax@redhat.com> 2.3.4-4F��@- Fix builds/unix/libtool to not emit rpath into binaries. (#225770)_��Fg[�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-3F^��- Add freetype-2.3.4-ttf-overflow.patch]��EgW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-2F @- Add alpha to 64-bit archs (#236166)J��Dg1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-1F��- Update to 2.3.4.{��Cg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-2F�- Include new demos ftgrid and ftdiff in freetype-demos. (#235478)J��Bg1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-1F�- Update to 2.3.3.J��Ag1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.2-1E�L@- Update to 2.3.2.J��@g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.1-1E�'�- Update to 2.3.1. � �y � 8 � | w 0 � J � M�E�Z�_�=�c��J� � ��{q�+�Peter Robinson <pbrobinson@redhat.com> - 2.4.11-10S��- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: #1126099M��z_?�Daniel Mach <dmach@redhat.com> - 2.4.11-9R�U�- Mass rebuild 2014-01-24M��y_?�Daniel Mach <dmach@redhat.com> - 2.4.11-8R�k�- Mass rebuild 2013-12-27s��xa��Marek Kasik <mkasik@redhat.com> - 2.4.11-7RM\@- Fix vertical size of emboldened glyphs - Resolves: #1010341b��wyO�Peter Robinson <pbrobinson@fedoraproject.org> 2.4.11-6Q��- Add aarch64 to 64 bit arch listp��va��Marek Kasik <mkasik@redhat.com> - 2.4.11-5Q��A- Change encoding of "docs/tutorial/example3.cpp" to UTF-8X��uaS�Marek Kasik <mkasik@redhat.com> - 2.4.11-4Q��@- Package ftconfig.h as source file�A��ta�#�Marek Kasik <mkasik@redhat.com> - 2.4.11-3QHS@- Fix emboldening: - split out MSB function - fix integer overflows - fix broken emboldening at small sizes - Resolves: #891457���s���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.11-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��raY�Marek Kasik <mkasik@redhat.com> - 2.4.11-1P�!@- Update to 2.4.11 - Resolves: #889177K��qa9�Marek Kasik <mkasik@redhat.com> - 2.4.10-3P��@- Update License field���p���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���o]�I�Marek Kasik <mkasik@redhat.com> 2.4.10-1O�j�- Update to 2.4.10 - Remove patches which are already included in upstream - Resolves: #832651m��n[��Marek Kasik <mkasik@redhat.com> 2.4.9-1Ou�@- Update to 2.4.9 - Fixes various CVEs - Resolves: #806270���m���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.8-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild^��l[e�Marek Kasik <mkasik@redhat.com> 2.4.8-1N�T@- Update to 2.4.8 - Remove an unneeded patchp��k�I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.7-2N��@- Rebuilt for glibc bug#747377n��j[��Marek Kasik <mkasik@redhat.com> 2.4.7-1N� @- Update to 2.4.7 - Fixes CVE-2011-3256 - Resolves: #747262C��i[/�Marek Kasik <mkasik@redhat.com> 2.4.6-1N:��- Update to 2.4.6� ��h[�'�Marek Kasik <mkasik@redhat.com> 2.4.5-2N&�@- Add freetype-2.4.5-CVE-2011-0226.patch (Add better argument check for `callothersubr'.) - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthias Drochner - Resolves: #723469C��g[/�Marek Kasik <mkasik@redhat.com> 2.4.5-1N �@- Update to 2.4.5q��f[� �Marek Kasik <mkasik@redhat.com> 2.4.4-4Mv@- Fix autohinting fallback (#547532). - Ignore CFF-based OTFs.�!��e[�i�Marek Kasik <mkasik@redhat.com> 2.4.4-3Ma@- Enable bytecode interpreter (#547532). - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.���d���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild���c[�/�Marek Kasik <mkasik@redhat.com> 2.4.4-1L��@- Update to 2.4.4 - Remove freetype-2.4.3-CVE-2010-3855.patch - Resolves: #659020� ��b[�c�Marek Kasik <mkasik@redhat.com> 2.4.3-2L� �- Add freetype-2.4.3-CVE-2010-3855.patch (Protect against invalid `runcnt' values.) - Resolves: #651764W��a[W�Marek Kasik <mkasik@redhat.com> 2.4.3-1L��- Update to 2.4.3 - Resolves: #639906 � � F � =�m������k�o�(�/ � ���m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�� ]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�� ]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�� eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�� c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��� c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��c��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�� c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��~c��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���}c�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268���|c�Q�Marek Kasik <mkasik@redhat.com> - 2.4.11-11T��- Fixes CVE-2014-9657 - Check minimum size of `record_size'. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than `strncmp'. - Fixes CVE-2014-9660 - Check `_BDF_GLYPH_BITS'. - Fixes CVE-2014-9661 - Initialize `face->ttf_size'. - Always set `face->ttf_size' directly. - Exclusively use the `truetype' font driver for loading the font contained in the `sfnts' array. - Fixes CVE-2014-9663 - Fix order of validity tests. - Fixes CVE-2014-9664 - Add another boundary testing. - Fix boundary testing. - Fixes CVE-2014-9667 - Protect against addition overflow. - Fixes CVE-2014-9669 - Protect against overflow in additions and multiplications. - Fixes CVE-2014-9670 - Add sanity checks for row and column values. - Fixes CVE-2014-9671 - Check `size' and `offset' values. - Fixes CVE-2014-9673 - Fix integer overflow by a broken POST table in resource-fork. - Fixes CVE-2014-9674 - Fix integer overflow by a broken POST table in resource-fork. - Additional overflow check in the summation of POST fragment lengths. - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions - Resolves: #1197740 ! � �Z � � � � y $ � p 0 A � � "�k��`���8k V�.�; � ���1c�A�Mike A. Harris <mharris@redhat.com> 2.0.4-1;���- Updated source to 2.0.4 - Added freetype demo's back into src.rpm, but not building yet.t��0c��Mike A. Harris <mharris@redhat.com> 2.0.3-7;zd@- Changed package to use {findlang} macro to fix bug (#50676)w��/c� �Mike A. Harris <mharris@redhat.com> 2.0.3-6;Q��- Changed freetype-devel to group Development/Libraries (#47625)i��.mi�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-5;I��- Fix up FT1 headers to please Qt 3.0.0 beta 2�6��-m��Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4;5�@- Add ft2build.h to -devel package, since it's included by all other freetype headers, the package is useless without it�/��,a��Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3;1�- Change "Requires: freetype = name/ver" to "freetype = version/release", and move the requirements to the subpackages.]��+c[�Mike A. Harris <mharris@redhat.com> 2.0.3-2;-�@- Added "Requires: freetype = name/ver"�H��*c�/�Mike A. Harris <mharris@redhat.com> 2.0.3-1;&@- Updated to Freetype 2.0.3, minor specfile tweaks. - Freetype2 docs are is in a separate tarball now. Integrated it. - Built in new environment.[��)Ue�Bill Nottingham <notting@redhat.com>:�_@- rebuild for C++ exception handling on ia64g��(]u�Bernhard Rosenkraenzer <bero@redhat.com>:i}�- Build ttmkfdir with -O0, workaround for Bug #24253�%��'Q�{�Nalin Dahyabhai <nalin@redhat.com>:h,@- libtool is used to build libttf, so use libtool to link ttmkfdir with it - fixup a paths for a couple of missing docsD��&]/�Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Update ttmkfdirh��%]w�Bernhard Rosenkraenzer <bero@redhat.com>:I�- Update to 2.0.1 and 1.4 - Mark locale files as such>��$M3�Prospector <bugzilla@redhat.com>9l]�- automatic rebuildT��#O]�Preston Brown <pbrown@redhat.com>9D�- move .la file to devel pkg - FHS pathsm��"O� �Preston Brown <pbrown@redhat.com>8��- revert spaces patch, fix up some foundry names to match X onesd��!Q{�Nalin Dahyabhai <nalin@redhat.com>8���- add defattr, ftmetric, ftsbit, ftstrtto per bug #9174K�� SG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summaryt�� O��Preston Brown <pbrown@redhat.com>8|l�- make ttmkfdir replace spaces in family names with underscores (#7613)Q�� ]I�Bernhard Rosenkraenzer <bero@redhat.com>8{@- 1.3.1 - handle RPM_OPT_FLAGSN�� OQ�Preston Brown <pbrown@redhat.com>8)^@- fix a path for ttmkfdir Makefile�j�� O��Preston Brown <pbrown@redhat.com>7��- newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin - freetype utilities moved to subpkg, X dependency removed from main pkg - libttf.so symlink moved to devel pkg<��O-�Preston Brown <pbrown@redhat.com>6�0�- strip binariese��S{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 5)G��S?�Cristian Gafton <gafton@redhat.com>6��- fixed the doc file listQ��OW�Preston Brown <pbrown@redhat.com>6��- Injected new description and group.<��O-�Preston Brown <pbrown@redhat.com>6� @- added ttmkfdir;��O+�Preston Brown <pbrown@redhat.com>6��- update to 1.2���S�c�Cristian Gafton <gafton@redhat.com>6���- call libtoolize to sanitize config.sub and get ARM support - dispoze of the patch (not necessary anymore)W��Oc�Preston Brown <pbrown@redhat.com>6-�- post/postun sections for ldconfig action.d��O}�Preston Brown <pbrown@redhat.com>6,{@- initial RPM, includes normal and development packages.������Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 2.8-14.1.tuxcare.els2e�,�- CVE-2025-27363: fix OOB write when parsing font subglyph structures���� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size e 1�t N � � � e �"�W�E�{��;��7>�e \��NeW�Florian La Roche <Florian.LaRoche@redhat.de>=��@- disable perl, it is not used at allu��M]��Elliot Lee <sopwith@redhat.com> 2.1.2-11=�- Instead of removing unpackaged file, include it in the package.�t��Le��Mike A. Harris <mharris@redhat.com> 2.1.2-10=�@- Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS - Cleaned up various _foodir macros throughtout specfile - Removed with_ttmkfdir build option as it is way obsolete[��KUe�Tim Powers <timp@redhat.com> 2.1.2-8=�V�- remove unpackaged files from the buildrootG��JME�Owen Taylor <otaylor@redhat.com>=l�@- Fix a bug with PCF metricsV��IMc�Owen Taylor <otaylor@redhat.com>=S��- Backport autohinter improvements from CVSV��HMc�Owen Taylor <otaylor@redhat.com>==E@- Fix from CVS for transformations (#68964)Y��GMi�Owen Taylor <otaylor@redhat.com>=*�@- Add another bugfix for the postscript hinter���FM�=�Owen Taylor <otaylor@redhat.com>=)~�- Add support for BlueFuzz private dict value, fixing rendering glitch for Luxi Mono.Y��EMi�Owen Taylor <otaylor@redhat.com>="�@- Add an experimental FT_Set_Hint_Flags() calli��DM��Owen Taylor <otaylor@redhat.com>= D@- Update to 2.1.2 - Add a patch fixing freetype PS hinter bugw��Cc� �Mike A. Harris <mharris@redhat.com> 2.1.1-2=@- Added ft rpm build time conditionalizations upon user requestsB��B]+�Owen Taylor <otaylor@redhat.com> 2.1.1-1=�@- Version 2.1.1M��AMQ�Owen Taylor <otaylor@redhat.com>=��- Add a fix for PCF character maps:��@E3�Tim Powers <timp@redhat.com><��@- automated rebuild���?c�/�Mike A. Harris <mharris@redhat.com> 2.1.0-2<��- Updated freetype to version 2.1.0 - Added libtool fix for freetype 1.4 (#64631)���>a�)�Nalin Dahyabhai <nalin@redhat.com> 2.0.9-2<��@- use "libtool install" instead of "install" to install some binaries (#62005)Q��=cC�Mike A. Harris <mharris@redhat.com> 2.0.9-1<��@- Updated to freetype 2.0.9a��<cc�Mike A. Harris <mharris@redhat.com> 2.0.8-4<x�- Added proper docs+demos source for 2.0.8.� ��;c�1�Mike A. Harris <mharris@redhat.com> 2.0.8-3<w�@- Added compat patch so 2.x works more like 1.x - Rebuilt with new build toolchain���:c�/�Mike A. Harris <mharris@redhat.com> 2.0.8-2<v2�- Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7 on the freetype website. Munged specfile to deal with the problem by using {oldversion} instead of version where appropriate. <sigh>�A��9U�/�Tim Powers <timp@redhat.com> 2.0.6-3<[�- bumping release so that we don't collide with another build of freetype, make sure to change the release requirement in the XFree86 package�`��8c�_�Mike A. Harris <mharris@redhat.com> 2.0.6-2<Z�@- Made ttmkfdir inclusion conditional, and set up a define to include ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new XFree86-font-utils package.Y��7cS�Mike A. Harris <mharris@redhat.com> 2.0.6-1<Ek@- Updated freetype to version 2.0.6B��6U3�Tim Powers <timp@redhat.com> 2.0.5-4<<0�- automated rebuild�!��5[�i�Elliot Lee <sopwith@redhat.com> 2.0.5-3<t�- Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating font list). (ttmkfdir-iso10646.patch) - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch) - Undo fix for #24253, assume compiler was fixed.\��4mO�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.5-2;�- Fix build with gcc 3.1 (#56079)Y��3cS�Mike A. Harris <mharris@redhat.com> 2.0.5-1;�h@- Updated freetype to version 2.0.5�J��2c�3�Mike A. Harris <mharris@redhat.com> 2.0.4-2;�}@- Added new subpackage freetype-demos, added demos to build - Disabled ftdump, ftlint in utils package favoring the newer utils in demos package. � � ? � l J � � Z =�v5�@������^���Y � � 7��lS �Jesse Keating <jkeating@redhat.com>C�q�- rebuilti��kim�Bill Nottingham <notting@redhat.com> 2.1.10-5C}�@- Remove references to obsolete /usr/X11R6 pathsW��jiI�Matthias Clasen <mclasen@redhat.com> 2.1.10-4CgX�- Switch requires to modular XO��ii9�Matthias Clasen <mclasen@redhat.com> 2.1.10-3CX�@- BuildRequire gettext� ��hc�1�Jason Vas Dias <jvdias@redhat.com> 2.1.10-2CL��- fix 'without_bytecode_interpreter 0' build: freetype-2.1.10-enable-ft2-bci.patcha��gi]�Matthias Clasen <mclasen@redhat.com> 2.1.10-1CFc@- Update to 2.1.10 - Add necessary fixes`��fca�Kristian Høgsberg <krh@redhat.com> 2.1.9-4C�@- Fix freetype-config on 64 bit platforms.Q��e]I�Karsten Hopp <karsten@redhat.de> 2.1.9-3B�@- BuildRequires xorg-x11-devel?��dc �David Zeuthen <davidz@redhat.com> - 2.1.9-2B(M�- Rebuild�)��ca�s�Owen Taylor <otaylor@redhat.com> - 2.1.9-1A�- Upgrade to 2.1.9 - Since we are just using automake for aclocal, use it unversioned, instead of specifying 1.4.3��bK �Elliot Lee <sopwith@redhat.com>@��- rebuilt�M��a]�?�Owen Taylor <otaylor@redhat.com> 2.1.7-4@��@- Add patch from freetype CVS to fix problem with eexec (#117743) - Add freetype-devel to buildrequires and -devel requires (Maxim Dzumanenko, #111108)���`c�;�Mike A. Harris <mharris@redhat.com> 2.1.7-3@O@- Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and SIGILL crashes in mkfontscale which have been traced into freetype and seem to be caused by aliasing issues in freetype macros (#118021)=��__ �Elliot Lee <sopwith@redhat.com> 2.1.7-2.1@Dw@- rebuilt;��^[ �Elliot Lee <sopwith@redhat.com> 2.1.7-2@,�@- rebuiltE��]]1�Owen Taylor <otaylor@redhat.com> 2.1.7-1@ �- Upgrade to 2.1.7�'��\e�k�Florian La Roche <Florian.LaRoche@redhat.de>?p5�- allow compiling without the demos as that requires XFree86 (this allows bootstrapping XFree86 on new archs)=��[_ �Elliot Lee <sopwith@redhat.com> 2.1.4-4.1?3��- RebuiltG��Za1�Owen Taylor <otaylor@redhat.com> 2.1.4-4.0? �@- Bump for rebuildx��Y]��Owen Taylor <otaylor@redhat.com> 2.1.4-3>���- Fix crash with non-format-0 hdmx tables (found by David Woodhouse)���X]�U�Owen Taylor <otaylor@redhat.com> 2.1.4-1>�v�- Version 2.1.4 - Relibtoolize to get deplibs right for x86_64 - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781) - Relativize absolute symlinks to fix the -debuginfo package (#83521, Mike Harris)3��WK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltI��VY=�Jeremy Katz <katzj@redhat.com> 2.1.3-9>̻�- fix build with gcc 3.3h��UM��Owen Taylor <otaylor@redhat.com>>[Z�- Add a memleak fix for the gzip backend from Federic Crozat�>��T[�#�Elliot Lee <sopwith@redhat.com> 2.1.3-7>K��- Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries on ppc64. - Use _smp_mflags (for freetype 2.x only)[��SMm�Owen Taylor <otaylor@redhat.com>>?�@- Switch to using %configure (should fix #82330)0��RE �Tim Powers <timp@redhat.com>>.��- rebuilt���Q]�Y�Owen Taylor <otaylor@redhat.com> 2.1.3-4>o�- Make FreeType robust against corrupt fonts with recursive composite glyphs (#74782, James Antill)���P]�3�Owen Taylor <otaylor@redhat.com> 2.1.3-3>)�- Add a patch to implement FT_LOAD_TARGET_LIGHT - Fix up freetype-1.4-libtool.patch�0��Oc��Mike A. Harris <mharris@redhat.com> 2.1.3-2=�z@- Update to freetype 2.1.3 - Removed ttmkfdir sources and patches, as they have been moved from the freetype packaging to XFree86 packaging, and now to the ttmkfdir package - Removed patches that are now included in 2.1.3: freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch, freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch, freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch, freetype-2.1.2-leftright.patch - Conditionalized inclusion of freetype 1.4 library. � �"� � � G � � + � Y � Y ���B��'�x�#d�5 � � I�� g/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-1H� @- Update to 2.3.7I�� g/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.6-1HNl�- Update to 2.3.6u�� s{�Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.5-5H4�- fix license tag - add sparc64 to list of 64bit archese�� � ?�Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.3.5-4G�s@- Autorebuild for GCC 4.3I��]9�Adam Jackson <ajax@redhat.com> - 2.3.5-3F�v�- Rebuild for build ID�:��g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2F�$@- Change spec file to permit enabling bytecode-interpreter and subpixel-rendering without editing spec file. - Resolves: 249986t��g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-1F�;@- Update to 2.3.5. - Drop freetype-2.3.4-ttf-overflow.patchv��Y��Adam Jackson <ajax@redhat.com> 2.3.4-4F��@- Fix builds/unix/libtool to not emit rpath into binaries. (#225770)_��g[�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-3F^��- Add freetype-2.3.4-ttf-overflow.patch]��gW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-2F @- Add alpha to 64-bit archs (#236166)J��g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-1F��- Update to 2.3.4.{��g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-2F�- Include new demos ftgrid and ftdiff in freetype-demos. (#235478)J�� g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-1F�- Update to 2.3.3.J��g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.2-1E�L@- Update to 2.3.2.J��~g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.1-1E�'�- Update to 2.3.1.���}g�%�Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-2E��- Add without_subpixel_rendering. - Drop X11_PATH=/usr. Not needed anymore.�;��|g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1E��- Update to 2.3.0. - Drop upstream patches. - Drop -fno-strict-aliasing, it should just work. - Fix typo in ftconfig.h generation.�V��{i�E�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16E���- Backport binary-search fixes from HEAD - Add freetype-2.2.1-ttcmap.patch - Resolves: #208734 - Fix rendering issue with some Asian fonts. - Add freetype-2.2.1-fix-get-orientation.patch - Resolves: #207261 - Copy non-X demos even if not compiling with_xfree86. - Add freetype-2.2.1-zero-item-size.patch, to fix crasher. - Resolves #214048 - Add X11_PATH=/usr to "make"s, to find modern X. - Resolves #212199� ��zi�W�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10EO�- Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841 - Add freetype-2.2.1-memcpy-fix.patchc��ygc�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-9E �- Add BuildRequires: libX11-devel (#205355)���xg�C�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-8D�,@- Add freetype-composite.patch and freetype-more-composite.patch from upstream. (#131851)b��wi_�Matthias Clasen <mclasen@redhat.com> - 2.2.1-7D��- Require pkgconfig in the -devel packageh��vgm�Jesse Keating <jkeating@redhat.com> - 2.2.1-6D�- pass --disable-static to %configure. (#172628)S��ugC�Jesse Keating <jkeating@redhat.com> - 2.2.1-5D�Z@- don't package static libsn��tqo�Matthias Clasen <mclasen@redhat.com> - 2.2.1-4.fc6D�@- fix a problem with the multilib patch (#202366)O��sk7�Matthias Clasen <mclasen@redhat.com> - 2.2.1-3DȪ�- fix multilib issuesC��rk �Jesse Keating <jkeating@redhat.com> - 2.2.1-2.1D��@- rebuildU��qgG�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-2D�L�- Remove unused BuildRequires�Q��pg�=�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1D�L�- Update to 2.2.1 - Remove FreeType 1, to move to extras - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid - Enable modules gxvalid and otvalida��o_g�Karsten Hopp <karsten@redhat.de> 2.1.10-6Dk@- add buildrequires libICE-devel, libSM-develh��nqc�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2.1C�@- bump again for double-long bug on ppc(64)n��mms�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2C�- rebuilt for new gcc4.1 snapshot and glibc changes j ��W � E � < � ` � U � 7�6� �'��`�E���@ � j ^��*[e�Marek Kasik <mkasik@redhat.com> 2.4.8-1N�T@- Update to 2.4.8 - Remove an unneeded patchp��)�I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.7-2N��@- Rebuilt for glibc bug#747377n��([��Marek Kasik <mkasik@redhat.com> 2.4.7-1N� @- Update to 2.4.7 - Fixes CVE-2011-3256 - Resolves: #747262C��'[/�Marek Kasik <mkasik@redhat.com> 2.4.6-1N:��- Update to 2.4.6� ��&[�'�Marek Kasik <mkasik@redhat.com> 2.4.5-2N&�@- Add freetype-2.4.5-CVE-2011-0226.patch (Add better argument check for `callothersubr'.) - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthias Drochner - Resolves: #723469C��%[/�Marek Kasik <mkasik@redhat.com> 2.4.5-1N �@- Update to 2.4.5q��$[� �Marek Kasik <mkasik@redhat.com> 2.4.4-4Mv@- Fix autohinting fallback (#547532). - Ignore CFF-based OTFs.�!��#[�i�Marek Kasik <mkasik@redhat.com> 2.4.4-3Ma@- Enable bytecode interpreter (#547532). - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.���"���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild���![�/�Marek Kasik <mkasik@redhat.com> 2.4.4-1L��@- Update to 2.4.4 - Remove freetype-2.4.3-CVE-2010-3855.patch - Resolves: #659020� �� [�c�Marek Kasik <mkasik@redhat.com> 2.4.3-2L� �- Add freetype-2.4.3-CVE-2010-3855.patch (Protect against invalid `runcnt' values.) - Resolves: #651764W�� [W�Marek Kasik <mkasik@redhat.com> 2.4.3-1L��- Update to 2.4.3 - Resolves: #639906��� [�S�Marek Kasik <mkasik@redhat.com> 2.4.2-3L�d�- Add freetype-2.4.2-CVE-2010-3311.patch (Don't seek behind end of stream.) - Resolves: #638522��� e�)�Matthias Clasen <mclasen@redhat.com> 2.4.2-2L[�A- Fix a thinko, we still want to disable the bytecode interpreter by default� �� e�/�Matthias Clasen <mclasen@redhat.com> 2.4.2-1L[�@- Update to 2.4.2 - Drop upstreamed patch, bytecode interpreter now on by default^��e[�Behdad Esfahbod <behdad@redhat.com> 2.3.12-1K��@- Update to 2.3.12 - Drop mathlib patch���e�Q�Behdad Esfahbod <behdad@redhat.com> 2.3.11-2K�@- Drop upstreamed patch. - Enable patented bytecode interpretter now that the patents are expired.�&��e�i�Behdad Esfahbod <behdad@redhat.com> 2.3.11-1J�I@- Update to 2.3.11. - Add freetype-2.3.11-more-demos.patch - New demo programs ftmemchk, ftpatchk, and fttimero��e}�Behdad Esfahbod <behdad@redhat.com> 2.3.10-1J��@- Drop freetype-2.3.9-aliasing.patch - Update to 2.3.10.l��cy�Behdad Esfahbod <behdad@redhat.com> 2.3.9-6Jq�@- Add freetype-2.3.9-aliasing.patch - Resolves: 513582������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.9-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildU��eI�Matthias Clasen <mclasen@redhat.com> 2.3.9-4J�@- Don't own /usr/lib/pkgconfig��g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-3I̿�- Disable subpixel hinting by default. Was turned on unintentionally.�#��g�a�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2I� �- Add Provides: freetype-bytecode and freetype-subpixel if built with those options. - Resolves: #155210]��gW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-1I�J�- Update to 2.3.9. - Resolves #489928s��k�Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-2.1I��- Preserve timestamp of FTL.TXT when converting to UTF-8.������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.8-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuildv��g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-1Io%@- Update to 2.3.8 - Remove freetype-autohinter-ligature.patch�1��g�}�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3I>]�- Add full source URL to Source lines. - Add docs to main and devel package. - rpmlint is happy now. - Resolves: #225770u�� g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-2I9�- Add freetype-autohinter-ligature.patch - Resolves: #368561 U e�] � r w � U � { � b��� �= � U d��A]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��@]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��?eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��>c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���=c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��<c��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���;c�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268���:c�Q�Marek Kasik <mkasik@redhat.com> - 2.4.11-11T��- Fixes CVE-2014-9657 - Check minimum size of `record_size'. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than `strncmp'. - Fixes CVE-2014-9660 - Check `_BDF_GLYPH_BITS'. - Fixes CVE-2014-9661 - Initialize `face->ttf_size'. - Always set `face->ttf_size' directly. - Exclusively use the `truetype' font driver for loading the font contained in the `sfnts' array. - Fixes CVE-2014-9663 - Fix order of validity tests. - Fixes CVE-2014-9664 - Add another boundary testing. - Fix boundary testing. - Fixes CVE-2014-9667 - Protect against addition overflow. - Fixes CVE-2014-9669 - Protect against overflow in additions and multiplications. - Fixes CVE-2014-9670 - Add sanity checks for row and column values. - Fixes CVE-2014-9671 - Check `size' and `offset' values. - Fixes CVE-2014-9673 - Fix integer overflow by a broken POST table in resource-fork. - Fixes CVE-2014-9674 - Fix integer overflow by a broken POST table in resource-fork. - Additional overflow check in the summation of POST fragment lengths. - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions - Resolves: #1197740� ��9q�+�Peter Robinson <pbrobinson@redhat.com> - 2.4.11-10S��- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: #1126099M��8_?�Daniel Mach <dmach@redhat.com> - 2.4.11-9R�U�- Mass rebuild 2014-01-24M��7_?�Daniel Mach <dmach@redhat.com> - 2.4.11-8R�k�- Mass rebuild 2013-12-27s��6a��Marek Kasik <mkasik@redhat.com> - 2.4.11-7RM\@- Fix vertical size of emboldened glyphs - Resolves: #1010341b��5yO�Peter Robinson <pbrobinson@fedoraproject.org> 2.4.11-6Q��- Add aarch64 to 64 bit arch listp��4a��Marek Kasik <mkasik@redhat.com> - 2.4.11-5Q��A- Change encoding of "docs/tutorial/example3.cpp" to UTF-8X��3aS�Marek Kasik <mkasik@redhat.com> - 2.4.11-4Q��@- Package ftconfig.h as source file�A��2a�#�Marek Kasik <mkasik@redhat.com> - 2.4.11-3QHS@- Fix emboldening: - split out MSB function - fix integer overflows - fix broken emboldening at small sizes - Resolves: #891457���1���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.11-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��0aY�Marek Kasik <mkasik@redhat.com> - 2.4.11-1P�!@- Update to 2.4.11 - Resolves: #889177K��/a9�Marek Kasik <mkasik@redhat.com> - 2.4.10-3P��@- Update License field���.���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���-]�I�Marek Kasik <mkasik@redhat.com> 2.4.10-1O�j�- Update to 2.4.10 - Remove patches which are already included in upstream - Resolves: #832651m��,[��Marek Kasik <mkasik@redhat.com> 2.4.9-1Ou�@- Update to 2.4.9 - Fixes various CVEs - Resolves: #806270���+���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.8-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild ! � uo d � � � � . � z : K��,�u�j�� �Bu`�8 � w��bc� �Mike A. Harris <mharris@redhat.com> 2.0.3-6;Q��- Changed freetype-devel to group Development/Libraries (#47625)i��ami�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-5;I��- Fix up FT1 headers to please Qt 3.0.0 beta 2�6��`m��Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4;5�@- Add ft2build.h to -devel package, since it's included by all other freetype headers, the package is useless without it�/��_a��Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3;1�- Change "Requires: freetype = name/ver" to "freetype = version/release", and move the requirements to the subpackages.]��^c[�Mike A. Harris <mharris@redhat.com> 2.0.3-2;-�@- Added "Requires: freetype = name/ver"�H��]c�/�Mike A. Harris <mharris@redhat.com> 2.0.3-1;&@- Updated to Freetype 2.0.3, minor specfile tweaks. - Freetype2 docs are is in a separate tarball now. Integrated it. - Built in new environment.[��\Ue�Bill Nottingham <notting@redhat.com>:�_@- rebuild for C++ exception handling on ia64g��[]u�Bernhard Rosenkraenzer <bero@redhat.com>:i}�- Build ttmkfdir with -O0, workaround for Bug #24253�%��ZQ�{�Nalin Dahyabhai <nalin@redhat.com>:h,@- libtool is used to build libttf, so use libtool to link ttmkfdir with it - fixup a paths for a couple of missing docsD��Y]/�Bernhard Rosenkraenzer <bero@redhat.com>:]�@- Update ttmkfdirh��X]w�Bernhard Rosenkraenzer <bero@redhat.com>:I�- Update to 2.0.1 and 1.4 - Mark locale files as such>��WM3�Prospector <bugzilla@redhat.com>9l]�- automatic rebuildT��VO]�Preston Brown <pbrown@redhat.com>9D�- move .la file to devel pkg - FHS pathsm��UO� �Preston Brown <pbrown@redhat.com>8��- revert spaces patch, fix up some foundry names to match X onesd��TQ{�Nalin Dahyabhai <nalin@redhat.com>8���- add defattr, ftmetric, ftsbit, ftstrtto per bug #9174K��SSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summaryt��RO��Preston Brown <pbrown@redhat.com>8|l�- make ttmkfdir replace spaces in family names with underscores (#7613)Q��Q]I�Bernhard Rosenkraenzer <bero@redhat.com>8{@- 1.3.1 - handle RPM_OPT_FLAGSN��POQ�Preston Brown <pbrown@redhat.com>8)^@- fix a path for ttmkfdir Makefile�j��OO��Preston Brown <pbrown@redhat.com>7��- newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin - freetype utilities moved to subpkg, X dependency removed from main pkg - libttf.so symlink moved to devel pkg<��NO-�Preston Brown <pbrown@redhat.com>6�0�- strip binariese��MS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 5)G��LS?�Cristian Gafton <gafton@redhat.com>6��- fixed the doc file listQ��KOW�Preston Brown <pbrown@redhat.com>6��- Injected new description and group.<��JO-�Preston Brown <pbrown@redhat.com>6� @- added ttmkfdir;��IO+�Preston Brown <pbrown@redhat.com>6��- update to 1.2���HS�c�Cristian Gafton <gafton@redhat.com>6���- call libtoolize to sanitize config.sub and get ARM support - dispoze of the patch (not necessary anymore)W��GOc�Preston Brown <pbrown@redhat.com>6-�- post/postun sections for ldconfig action.d��FO}�Preston Brown <pbrown@redhat.com>6,{@- initial RPM, includes normal and development packages.���E� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���Dm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��C]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���B]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218 W ��# � f @ � � � ��W���I��7�m��-��)0 � W \��eW�Florian La Roche <Florian.LaRoche@redhat.de>=��@- disable perl, it is not used at allu�� ]��Elliot Lee <sopwith@redhat.com> 2.1.2-11=�- Instead of removing unpackaged file, include it in the package.�t��e��Mike A. Harris <mharris@redhat.com> 2.1.2-10=�@- Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS - Cleaned up various _foodir macros throughtout specfile - Removed with_ttmkfdir build option as it is way obsolete[��~Ue�Tim Powers <timp@redhat.com> 2.1.2-8=�V�- remove unpackaged files from the buildrootG��}ME�Owen Taylor <otaylor@redhat.com>=l�@- Fix a bug with PCF metricsV��|Mc�Owen Taylor <otaylor@redhat.com>=S��- Backport autohinter improvements from CVSV��{Mc�Owen Taylor <otaylor@redhat.com>==E@- Fix from CVS for transformations (#68964)Y��zMi�Owen Taylor <otaylor@redhat.com>=*�@- Add another bugfix for the postscript hinter���yM�=�Owen Taylor <otaylor@redhat.com>=)~�- Add support for BlueFuzz private dict value, fixing rendering glitch for Luxi Mono.Y��xMi�Owen Taylor <otaylor@redhat.com>="�@- Add an experimental FT_Set_Hint_Flags() calli��wM��Owen Taylor <otaylor@redhat.com>= D@- Update to 2.1.2 - Add a patch fixing freetype PS hinter bugw��vc� �Mike A. Harris <mharris@redhat.com> 2.1.1-2=@- Added ft rpm build time conditionalizations upon user requestsB��u]+�Owen Taylor <otaylor@redhat.com> 2.1.1-1=�@- Version 2.1.1M��tMQ�Owen Taylor <otaylor@redhat.com>=��- Add a fix for PCF character maps:��sE3�Tim Powers <timp@redhat.com><��@- automated rebuild���rc�/�Mike A. Harris <mharris@redhat.com> 2.1.0-2<��- Updated freetype to version 2.1.0 - Added libtool fix for freetype 1.4 (#64631)���qa�)�Nalin Dahyabhai <nalin@redhat.com> 2.0.9-2<��@- use "libtool install" instead of "install" to install some binaries (#62005)Q��pcC�Mike A. Harris <mharris@redhat.com> 2.0.9-1<��@- Updated to freetype 2.0.9a��occ�Mike A. Harris <mharris@redhat.com> 2.0.8-4<x�- Added proper docs+demos source for 2.0.8.� ��nc�1�Mike A. Harris <mharris@redhat.com> 2.0.8-3<w�@- Added compat patch so 2.x works more like 1.x - Rebuilt with new build toolchain���mc�/�Mike A. Harris <mharris@redhat.com> 2.0.8-2<v2�- Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7 on the freetype website. Munged specfile to deal with the problem by using {oldversion} instead of version where appropriate. <sigh>�A��lU�/�Tim Powers <timp@redhat.com> 2.0.6-3<[�- bumping release so that we don't collide with another build of freetype, make sure to change the release requirement in the XFree86 package�`��kc�_�Mike A. Harris <mharris@redhat.com> 2.0.6-2<Z�@- Made ttmkfdir inclusion conditional, and set up a define to include ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new XFree86-font-utils package.Y��jcS�Mike A. Harris <mharris@redhat.com> 2.0.6-1<Ek@- Updated freetype to version 2.0.6B��iU3�Tim Powers <timp@redhat.com> 2.0.5-4<<0�- automated rebuild�!��h[�i�Elliot Lee <sopwith@redhat.com> 2.0.5-3<t�- Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating font list). (ttmkfdir-iso10646.patch) - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch) - Undo fix for #24253, assume compiler was fixed.\��gmO�Bernhard Rosenkraenzer <bero@redhat.com> 2.0.5-2;�- Fix build with gcc 3.1 (#56079)Y��fcS�Mike A. Harris <mharris@redhat.com> 2.0.5-1;�h@- Updated freetype to version 2.0.5�J��ec�3�Mike A. Harris <mharris@redhat.com> 2.0.4-2;�}@- Added new subpackage freetype-demos, added demos to build - Disabled ftdump, ftlint in utils package favoring the newer utils in demos package.���dc�A�Mike A. Harris <mharris@redhat.com> 2.0.4-1;���- Updated source to 2.0.4 - Added freetype demo's back into src.rpm, but not building yet.t��cc��Mike A. Harris <mharris@redhat.com> 2.0.3-7;zd@- Changed package to use {findlang} macro to fix bug (#50676) � � ? � l J � � Z =�v5�@������^���Y � � 7�� S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilti�� im�Bill Nottingham <notting@redhat.com> 2.1.10-5C}�@- Remove references to obsolete /usr/X11R6 pathsW�� iI�Matthias Clasen <mclasen@redhat.com> 2.1.10-4CgX�- Switch requires to modular XO�� i9�Matthias Clasen <mclasen@redhat.com> 2.1.10-3CX�@- BuildRequire gettext� ��c�1�Jason Vas Dias <jvdias@redhat.com> 2.1.10-2CL��- fix 'without_bytecode_interpreter 0' build: freetype-2.1.10-enable-ft2-bci.patcha��i]�Matthias Clasen <mclasen@redhat.com> 2.1.10-1CFc@- Update to 2.1.10 - Add necessary fixes`��ca�Kristian Høgsberg <krh@redhat.com> 2.1.9-4C�@- Fix freetype-config on 64 bit platforms.Q��]I�Karsten Hopp <karsten@redhat.de> 2.1.9-3B�@- BuildRequires xorg-x11-devel?��c �David Zeuthen <davidz@redhat.com> - 2.1.9-2B(M�- Rebuild�)��a�s�Owen Taylor <otaylor@redhat.com> - 2.1.9-1A�- Upgrade to 2.1.9 - Since we are just using automake for aclocal, use it unversioned, instead of specifying 1.4.3��K �Elliot Lee <sopwith@redhat.com>@��- rebuilt�M��]�?�Owen Taylor <otaylor@redhat.com> 2.1.7-4@��@- Add patch from freetype CVS to fix problem with eexec (#117743) - Add freetype-devel to buildrequires and -devel requires (Maxim Dzumanenko, #111108)���c�;�Mike A. Harris <mharris@redhat.com> 2.1.7-3@O@- Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and SIGILL crashes in mkfontscale which have been traced into freetype and seem to be caused by aliasing issues in freetype macros (#118021)=��_ �Elliot Lee <sopwith@redhat.com> 2.1.7-2.1@Dw@- rebuilt;��[ �Elliot Lee <sopwith@redhat.com> 2.1.7-2@,�@- rebuiltE��]1�Owen Taylor <otaylor@redhat.com> 2.1.7-1@ �- Upgrade to 2.1.7�'��e�k�Florian La Roche <Florian.LaRoche@redhat.de>?p5�- allow compiling without the demos as that requires XFree86 (this allows bootstrapping XFree86 on new archs)=��_ �Elliot Lee <sopwith@redhat.com> 2.1.4-4.1?3��- RebuiltG�� a1�Owen Taylor <otaylor@redhat.com> 2.1.4-4.0? �@- Bump for rebuildx�� ]��Owen Taylor <otaylor@redhat.com> 2.1.4-3>���- Fix crash with non-format-0 hdmx tables (found by David Woodhouse)��� ]�U�Owen Taylor <otaylor@redhat.com> 2.1.4-1>�v�- Version 2.1.4 - Relibtoolize to get deplibs right for x86_64 - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781) - Relativize absolute symlinks to fix the -debuginfo package (#83521, Mike Harris)3�� K �Elliot Lee <sopwith@redhat.com>>��@- rebuiltI�� Y=�Jeremy Katz <katzj@redhat.com> 2.1.3-9>̻�- fix build with gcc 3.3h��M��Owen Taylor <otaylor@redhat.com>>[Z�- Add a memleak fix for the gzip backend from Federic Crozat�>��[�#�Elliot Lee <sopwith@redhat.com> 2.1.3-7>K��- Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries on ppc64. - Use _smp_mflags (for freetype 2.x only)[��Mm�Owen Taylor <otaylor@redhat.com>>?�@- Switch to using %configure (should fix #82330)0��E �Tim Powers <timp@redhat.com>>.��- rebuilt���]�Y�Owen Taylor <otaylor@redhat.com> 2.1.3-4>o�- Make FreeType robust against corrupt fonts with recursive composite glyphs (#74782, James Antill)���]�3�Owen Taylor <otaylor@redhat.com> 2.1.3-3>)�- Add a patch to implement FT_LOAD_TARGET_LIGHT - Fix up freetype-1.4-libtool.patch�0��c��Mike A. Harris <mharris@redhat.com> 2.1.3-2=�z@- Update to freetype 2.1.3 - Removed ttmkfdir sources and patches, as they have been moved from the freetype packaging to XFree86 packaging, and now to the ttmkfdir package - Removed patches that are now included in 2.1.3: freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch, freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch, freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch, freetype-2.1.2-leftright.patch - Conditionalized inclusion of freetype 1.4 library. � �"� � � G � � + � Y � Y ���B��'�x�#d�5 � � I��?g/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-1H� @- Update to 2.3.7I��>g/�Behdad Esfahbod <besfahbo@redhat.com> 2.3.6-1HNl�- Update to 2.3.6u��=s{�Tom "spot" Callaway <tcallawa@redhat.com> - 2.3.5-5H4�- fix license tag - add sparc64 to list of 64bit archese��<� ?�Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.3.5-4G�s@- Autorebuild for GCC 4.3I��;]9�Adam Jackson <ajax@redhat.com> - 2.3.5-3F�v�- Rebuild for build ID�:��:g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2F�$@- Change spec file to permit enabling bytecode-interpreter and subpixel-rendering without editing spec file. - Resolves: 249986t��9g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-1F�;@- Update to 2.3.5. - Drop freetype-2.3.4-ttf-overflow.patchv��8Y��Adam Jackson <ajax@redhat.com> 2.3.4-4F��@- Fix builds/unix/libtool to not emit rpath into binaries. (#225770)_��7g[�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-3F^��- Add freetype-2.3.4-ttf-overflow.patch]��6gW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-2F @- Add alpha to 64-bit archs (#236166)J��5g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.4-1F��- Update to 2.3.4.{��4g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-2F�- Include new demos ftgrid and ftdiff in freetype-demos. (#235478)J��3g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.3-1F�- Update to 2.3.3.J��2g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.2-1E�L@- Update to 2.3.2.J��1g1�Behdad Esfahbod <besfahbo@redhat.com> 2.3.1-1E�'�- Update to 2.3.1.���0g�%�Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-2E��- Add without_subpixel_rendering. - Drop X11_PATH=/usr. Not needed anymore.�;��/g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1E��- Update to 2.3.0. - Drop upstream patches. - Drop -fno-strict-aliasing, it should just work. - Fix typo in ftconfig.h generation.�V��.i�E�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16E���- Backport binary-search fixes from HEAD - Add freetype-2.2.1-ttcmap.patch - Resolves: #208734 - Fix rendering issue with some Asian fonts. - Add freetype-2.2.1-fix-get-orientation.patch - Resolves: #207261 - Copy non-X demos even if not compiling with_xfree86. - Add freetype-2.2.1-zero-item-size.patch, to fix crasher. - Resolves #214048 - Add X11_PATH=/usr to "make"s, to find modern X. - Resolves #212199� ��-i�W�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10EO�- Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841 - Add freetype-2.2.1-memcpy-fix.patchc��,gc�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-9E �- Add BuildRequires: libX11-devel (#205355)���+g�C�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-8D�,@- Add freetype-composite.patch and freetype-more-composite.patch from upstream. (#131851)b��*i_�Matthias Clasen <mclasen@redhat.com> - 2.2.1-7D��- Require pkgconfig in the -devel packageh��)gm�Jesse Keating <jkeating@redhat.com> - 2.2.1-6D�- pass --disable-static to %configure. (#172628)S��(gC�Jesse Keating <jkeating@redhat.com> - 2.2.1-5D�Z@- don't package static libsn��'qo�Matthias Clasen <mclasen@redhat.com> - 2.2.1-4.fc6D�@- fix a problem with the multilib patch (#202366)O��&k7�Matthias Clasen <mclasen@redhat.com> - 2.2.1-3DȪ�- fix multilib issuesC��%k �Jesse Keating <jkeating@redhat.com> - 2.2.1-2.1D��@- rebuildU��$gG�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-2D�L�- Remove unused BuildRequires�Q��#g�=�Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1D�L�- Update to 2.2.1 - Remove FreeType 1, to move to extras - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid - Enable modules gxvalid and otvalida��"_g�Karsten Hopp <karsten@redhat.de> 2.1.10-6Dk@- add buildrequires libICE-devel, libSM-develh��!qc�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2.1C�@- bump again for double-long bug on ppc(64)n�� ms�Jesse Keating <jkeating@redhat.com> - 2.1.10-5.2C�- rebuilt for new gcc4.1 snapshot and glibc changes j ��W � E � < � ` � U � 7�6� �'��`�E���@ � j ^��][e�Marek Kasik <mkasik@redhat.com> 2.4.8-1N�T@- Update to 2.4.8 - Remove an unneeded patchp��\�I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.7-2N��@- Rebuilt for glibc bug#747377n��[[��Marek Kasik <mkasik@redhat.com> 2.4.7-1N� @- Update to 2.4.7 - Fixes CVE-2011-3256 - Resolves: #747262C��Z[/�Marek Kasik <mkasik@redhat.com> 2.4.6-1N:��- Update to 2.4.6� ��Y[�'�Marek Kasik <mkasik@redhat.com> 2.4.5-2N&�@- Add freetype-2.4.5-CVE-2011-0226.patch (Add better argument check for `callothersubr'.) - based on patches by Werner Lemberg, Alexei Podtelezhnikov and Matthias Drochner - Resolves: #723469C��X[/�Marek Kasik <mkasik@redhat.com> 2.4.5-1N �@- Update to 2.4.5q��W[� �Marek Kasik <mkasik@redhat.com> 2.4.4-4Mv@- Fix autohinting fallback (#547532). - Ignore CFF-based OTFs.�!��V[�i�Marek Kasik <mkasik@redhat.com> 2.4.4-3Ma@- Enable bytecode interpreter (#547532). - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.���U���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild���T[�/�Marek Kasik <mkasik@redhat.com> 2.4.4-1L��@- Update to 2.4.4 - Remove freetype-2.4.3-CVE-2010-3855.patch - Resolves: #659020� ��S[�c�Marek Kasik <mkasik@redhat.com> 2.4.3-2L� �- Add freetype-2.4.3-CVE-2010-3855.patch (Protect against invalid `runcnt' values.) - Resolves: #651764W��R[W�Marek Kasik <mkasik@redhat.com> 2.4.3-1L��- Update to 2.4.3 - Resolves: #639906���Q[�S�Marek Kasik <mkasik@redhat.com> 2.4.2-3L�d�- Add freetype-2.4.2-CVE-2010-3311.patch (Don't seek behind end of stream.) - Resolves: #638522���Pe�)�Matthias Clasen <mclasen@redhat.com> 2.4.2-2L[�A- Fix a thinko, we still want to disable the bytecode interpreter by default� ��Oe�/�Matthias Clasen <mclasen@redhat.com> 2.4.2-1L[�@- Update to 2.4.2 - Drop upstreamed patch, bytecode interpreter now on by default^��Ne[�Behdad Esfahbod <behdad@redhat.com> 2.3.12-1K��@- Update to 2.3.12 - Drop mathlib patch���Me�Q�Behdad Esfahbod <behdad@redhat.com> 2.3.11-2K�@- Drop upstreamed patch. - Enable patented bytecode interpretter now that the patents are expired.�&��Le�i�Behdad Esfahbod <behdad@redhat.com> 2.3.11-1J�I@- Update to 2.3.11. - Add freetype-2.3.11-more-demos.patch - New demo programs ftmemchk, ftpatchk, and fttimero��Ke}�Behdad Esfahbod <behdad@redhat.com> 2.3.10-1J��@- Drop freetype-2.3.9-aliasing.patch - Update to 2.3.10.l��Jcy�Behdad Esfahbod <behdad@redhat.com> 2.3.9-6Jq�@- Add freetype-2.3.9-aliasing.patch - Resolves: 513582���I���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.9-5Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildU��HeI�Matthias Clasen <mclasen@redhat.com> 2.3.9-4J�@- Don't own /usr/lib/pkgconfig��Gg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-3I̿�- Disable subpixel hinting by default. Was turned on unintentionally.�#��Fg�a�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2I� �- Add Provides: freetype-bytecode and freetype-subpixel if built with those options. - Resolves: #155210]��EgW�Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-1I�J�- Update to 2.3.9. - Resolves #489928s��Dk�Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-2.1I��- Preserve timestamp of FTL.TXT when converting to UTF-8.���C���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.8-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuildv��Bg��Behdad Esfahbod <besfahbo@redhat.com> 2.3.8-1Io%@- Update to 2.3.8 - Remove freetype-autohinter-ligature.patch�1��Ag�}�Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3I>]�- Add full source URL to Source lines. - Add docs to main and devel package. - rpmlint is happy now. - Resolves: #225770u��@g��Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-2I9�- Add freetype-autohinter-ligature.patch - Resolves: #368561 U e�] � r w � U � { � b��� �= � U d��t]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��s]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��reU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��qc{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���pc�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��oc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���nc�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268���mc�Q�Marek Kasik <mkasik@redhat.com> - 2.4.11-11T��- Fixes CVE-2014-9657 - Check minimum size of `record_size'. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than `strncmp'. - Fixes CVE-2014-9660 - Check `_BDF_GLYPH_BITS'. - Fixes CVE-2014-9661 - Initialize `face->ttf_size'. - Always set `face->ttf_size' directly. - Exclusively use the `truetype' font driver for loading the font contained in the `sfnts' array. - Fixes CVE-2014-9663 - Fix order of validity tests. - Fixes CVE-2014-9664 - Add another boundary testing. - Fix boundary testing. - Fixes CVE-2014-9667 - Protect against addition overflow. - Fixes CVE-2014-9669 - Protect against overflow in additions and multiplications. - Fixes CVE-2014-9670 - Add sanity checks for row and column values. - Fixes CVE-2014-9671 - Check `size' and `offset' values. - Fixes CVE-2014-9673 - Fix integer overflow by a broken POST table in resource-fork. - Fixes CVE-2014-9674 - Fix integer overflow by a broken POST table in resource-fork. - Additional overflow check in the summation of POST fragment lengths. - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions - Resolves: #1197740� ��lq�+�Peter Robinson <pbrobinson@redhat.com> - 2.4.11-10S��- Generic 32/64 bit platform detection (fix ppc64le build) - Resolves: #1126099M��k_?�Daniel Mach <dmach@redhat.com> - 2.4.11-9R�U�- Mass rebuild 2014-01-24M��j_?�Daniel Mach <dmach@redhat.com> - 2.4.11-8R�k�- Mass rebuild 2013-12-27s��ia��Marek Kasik <mkasik@redhat.com> - 2.4.11-7RM\@- Fix vertical size of emboldened glyphs - Resolves: #1010341b��hyO�Peter Robinson <pbrobinson@fedoraproject.org> 2.4.11-6Q��- Add aarch64 to 64 bit arch listp��ga��Marek Kasik <mkasik@redhat.com> - 2.4.11-5Q��A- Change encoding of "docs/tutorial/example3.cpp" to UTF-8X��faS�Marek Kasik <mkasik@redhat.com> - 2.4.11-4Q��@- Package ftconfig.h as source file�A��ea�#�Marek Kasik <mkasik@redhat.com> - 2.4.11-3QHS@- Fix emboldening: - split out MSB function - fix integer overflows - fix broken emboldening at small sizes - Resolves: #891457���d���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.11-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��caY�Marek Kasik <mkasik@redhat.com> - 2.4.11-1P�!@- Update to 2.4.11 - Resolves: #889177K��ba9�Marek Kasik <mkasik@redhat.com> - 2.4.10-3P��@- Update License field���a���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���`]�I�Marek Kasik <mkasik@redhat.com> 2.4.10-1O�j�- Update to 2.4.10 - Remove patches which are already included in upstream - Resolves: #832651m��_[��Marek Kasik <mkasik@redhat.com> 2.4.9-1Ou�@- Update to 2.4.9 - Fixes various CVEs - Resolves: #806270���^���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.8-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild R uo d � [ � � � � l�c��� �t � R ���]�)�Harald Hoyer <harald@redhat.com> 4.0.0-3O �- install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild������Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 2.8-14.1.tuxcare.els2e�,�- CVE-2025-27363: fix OOB write when parsing font subglyph structures��� � ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size��� m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�� ]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��� ]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�� ]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��c��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141������Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 2.8-14.1.tuxcare.els2e�,�- CVE-2025-27363: fix OOB write when parsing font subglyph structures���� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�� ]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d��~]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|��}]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[��|eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m��{c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141���zc�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z��yc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141���x� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.8-14.1.tuxcare.els1e�@- CVE-2022-27404: Fix buffer overflow in sfnt_init_face - CVE-2022-27405: Fix segmentation violation via FNT_Size_Request - CVE-2022-27406: Fix segmentation violation via FT_Request_Size���wm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j��v]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479���u]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218 . �o � w � � < � � D � ] �;�Y�T��. ���'Q�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��&cA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��%c��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��$��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��#cK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��"c�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��!co�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s�� c��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)��� c�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW�� cO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;�� c��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658)��� Q�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��cA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��c��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�a����-�Dmitrii Zudin <dzudin@cloudlinux.com> - 4.0.2-4.el7_3.1.tuxcare.els1fg@- Fix CVE-2023-4156: builtin.c (format_tree): When collecting positional field widths or precisions, check for wrap around to negative values.�����#�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.0.2-4.el7_3.1Y?�- Fix calls to chksize to avoid gawk being killed by SIGABRT (bug #1441689)L��]?�Daniel Mach <dmach@redhat.com> - 4.0.2-4R�U�- Mass rebuild 2014-01-24L��]?�Daniel Mach <dmach@redhat.com> - 4.0.2-3R�k�- Mass rebuild 2013-12-27������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.2-2Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��aU�Martin Briza <mbriza@redhat.com> - 4.0.2-1P��@- Update to upstream 4.0.2 (#890559)������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.1-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild�?��g��Martin Bříza <mbriza@redhat.com> - 4.0.1-1OЗ�- Update to upstream 4.0.1 (#808005) - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2 - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub() - Resolves #820550 - gawk: getline in BEGIN skips 2 linesI��]9�Harald Hoyer <harald@redhat.com> 4.0.0-4O �- add filesystem guard 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�@ � bc8e7dfb42b0beb341114eca8ea33f81f8bbffb24dcc30cb1776f35a67ab044aD�? � 9185b9f40ec7fb1a2d21e68c618152fb243715d24238817b293cfce431adcb82D�> � 7dad8bfdb74dea3a79a6e66581c6a95ea3a0ae70dda976d964f6cdb86c1f3789D�= � 06877892a9f23bb0a5112e203e9987c74a7e6d4e874a4e7202c8d5bd93e33c77D�< � 25977fd1a00b4a5c56042b3350439b42796b17acd022614da29051ac6ae958d4D�; � c58cdcc5f391bb2ccc77a1abbe7e318bb128c291361a258253efd01bf708f88cD�: � ece419e1acdb6f695e761a37d1a2f9676c384ca1b699040fe4ef4ea7bc278deeD�9 � 31c4d88e6def7d277e6f224c4a3fba04924dded979d0215261fc0d94ceef9e20D�8 � f1fdcb7731ae89dab93f977edaae4760546b15b61906a572209b95e2501572c9D�7 � 983bbaa6ad52f4c88b1532b149b0c10cd08b3e4c37e132480dd15d1c499a046bD�6 � 2eb84e3bb55cfaf415c2791e2f7d90b7e3413d90485c7e0b4c27383d5d6d4cf9D�5 � c1cd399453d9315f25926cddfdd351b4387826f23e44a1f89eb0c08e2c59471dD�4 � 4fffddbb75268fd4dd679e5560cecfb85cf0e342b1f3b3e555b971e63171bc9dD�3 � bbc098820e86f0b30bda476ae4f55d78a2d77dd0020a077c7bed7b2a09da58e9D�2 � 3579085b5dbc36d9ec3dce9ba0c8cf078ba81a859fa65345e242d84abb482a3fD�1 � 522be0c5d19f0f9aa70e7a0988814b646cf8e72a558ae20748b101a30266a639D�0 � 2ca24222fda6868e05c8820c0c1026433baaad3b3c09be3dc9a5d7e0d29d1f8aD�/ � 9218107b1957323ce6f7842bcceb288d50204a4cda5e924e7a27aa75ece8a85dD�. � 8c1cd82b30c8382a0fd17b55af8a59ad6beb9f31de3d577b3366f4669dc4de8cD�- � 2be6b928fb8524bbfeca75c941b8d8522cb16bd491d0bf956a3daafb1b7f833eD�, � 59485aab934481ad388e30de3b97c099f6b8438d8180fc1b3f4666f6c7a3f4bbD�+ � d7cf53ccaad7badf599e169775cae46998a5528edbeb9b7cc4c2e94e726c4857D�* � 87cc81a28b889b57fac900b2c82ca5ee3a188b3d95cf641eb09c86146ddf4106D�) � 7747a17cdec5fe4789ad1c492955dbb440aba37b6a1628bb43851c326f88c315D�( � e99d0cc80e45fd4c15c145ee367e883ed8283e990307789da0520336f9da88bbD�' � 55a471258abf86d6968b3be1a4aca07c21098d0cc038ae47ade20537d8c9fa98D�& � 5c1782022a352c60e0921244053066e79695d9b926d7368a1b4f99d2669e8c73D�% � ce944d203e3ec38068897db0713c5130365da22555f25a4e886635d7bfbda5a1D�$ � 8c1c167bbbd2a156cecab31af2966c00f039915cf198004eab6958d8cf152c79D�# � c081cadeef5bf09302f250162eefb830f94011356a4ade43aaf2a2ca7f5bfc33D�" � bf4a33d6d87a3af8a03ce96975e841a9f5be42e60cfa2d51ecc1904868fbec2bD�! � cd95959015f12f3ff8b9942643bdebce3b3b3809475000f62b7cc9649461cd67D� � 11fd39647f49db41f9b5b5c2bc8db7fd8ecfc02c48e95c3fb79d88b42897b311D� � 601f50d6da513387020318647d7d6991cc515167c293ff2ee625d3215fb87aa6D� � 11655de9d67311ef7e3f5e162e69ff85eb79c404b854795c557e2a5f211d9e20D� � e488164c06a14d1cfb9e7df4fa96444f1d8fd6bcb07660c477a627c9da8188e4D� � 0ceeba273b48ebe6b39f14945431ae2f9e2ee571d92f9af41c1c7eedcc3e46b0D� � 970a5ca7a4efcfc9ec3b90e0f3c8824d93dc82cbcd692c872c40f4a6058cc431D� � 2d29d72afb23cb46d18edd897b4c3eebcc420d7c8bd93d163ff66986c162dae8D� � f7f50fe446872d28dde19f298d1c762dd8148fae3c13c2f5b7cac6d5f6a2154aD� � ca9c949ad6b7ea04fd66063c80f24ae8f06beb585eb856cb1dfb6d355c84ae81D� � 3d8d6ece62ed3e1050a0eeddc1580607fe1e6b17409843452824363b4ca2f0d5D� � f7c15d8de73f1b3dd778fae8f2c8e242852f27f416cb11c5822e19100ff4f190D� � 1bc1f93f59a95c637cef073e99ee46e8e776f3f3eac7197602665691975b74f7D� � 98fb2320069b30a4ebe7f066dfb7fa6dd3c1d045219a7a68b81cc37b1569a6b7D� � e8f5c3674c692dff45c92183e5fa1de3990885b6ec4c29a0d7d13215d1b5eb06D� � 16c4997814101a5c4a0e74434313803c1a34ba9bcb6d49864961141ec119c221D� � c8cd7055f52590e220395be96f98ced9b9ca96289e06c9ee070f8335dae224e5D� � 80104f88b501ba487c3644e056f6870eeda3917c8067db379adce49ea3c4e5e4D� � 731764bcb017d4611fa507607efeeb1fb3612f07bbc273b3eae9bd5374a7a855D� � 269942ce3a6b1b2e727a9eca3e15514c0112c1daa07fd2c50f0ef3bae10eb53cD� � 84caebda2ca4fec4b991af6310fd29d85eb0bb4704236c1af8dfc2d871096d5cD� � 79eca6b01a66a4f2774408fbb0d6a14e490ccd0bfc70da34632edff4370bf7b1D� � 0111609a02be5f8a4079167fdf446d775f0924ad355cc64fdab553c27beee286D� � b451ea4eda75c1724ebc8f13186d7ddfb4bb7d79263c8c942b0444f3bd5b6f3cD� � 15f6bd25d4f62aa3b6715bfa0790f9df32623d97c0a18cc54a6ead300e1eab00 � � e � g � P � 0 � d��6�8�!��5� ���=Q�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��<cA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��;c��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��:��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��9cK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��8c�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��7co�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��6c��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���5c�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��4cO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��3c��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658)���2Q�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��1cA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��0c��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��/��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��.cK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��-c�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��,co�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��+c��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���*c�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��)cO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��(c��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658) � � e � g � P � 0 � d��6�8�!��5� ���SQ�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��RcA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��Qc��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��P��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��OcK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��Nc�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��Mco�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��Lc��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���Kc�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��JcO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��Ic��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658)���HQ�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��GcA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��Fc��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��E��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��DcK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��Cc�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��Bco�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��Ac��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���@c�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��?cO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��>c��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658) � � e � g � P � 0 � d��6�8�!��5� ���iQ�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��hcA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��gc��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��f��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��ecK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��dc�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��cco�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��bc��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���ac�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��`cO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��_c��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658)���^Q�M�Jeff Law <law@redhat.com> 4.8.5-37\? �- Avoid code generation bug due to incorrect CFG in the presence of setjmp/longjmp (#1655148).P��]cA�Marek Polacek <polacek@redhat.com> 4.8.5-36[ ��- back out the last changet��\c��Marek Polacek <polacek@redhat.com> 4.8.5-35[{@- adjust C++11 signatures to take a const_iterator (#1575888)�B��[��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��ZcK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��Yc�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��Xco�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��Wc��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���Vc�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��UcO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��Tc��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658) � � e � g � P � 0vi���1��O� � �L��|� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���{s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���z{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��yk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���xu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��wu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���vi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��uq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��ti�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���si�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��rq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�B��q��s�Azat Nurgaliev <anurgaliev@cloudlinux.com> - 4.8.5-44.tuxcare.els1g�@- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted codeU��pcK�Marek Polacek <polacek@redhat.com> 4.8.5-44^{G�- fix pr92950.c test (#1784759)�'��oc�m�Marek Polacek <polacek@redhat.com> 4.8.5-43^y�@- fix wrong code emitted for movv1qi on s390x (#1784759) - fix wrong code with EH due to a bug in LRA (#1800526)g��nco�Marek Polacek <polacek@redhat.com> 4.8.5-42^ [�- avoid folding shifts of vector types (#1740539)s��mc��Marek Polacek <polacek@redhat.com> 4.8.5-41]�B�- backport ARMv8.3 pointer authentication patches (#1769573)���lc�#�Marek Polacek <polacek@redhat.com> 4.8.5-40]6��- fix ICE with lambda in NSDMI (PR c++/66585, #1713056) - revert the changeW��kcO�Marek Polacek <polacek@redhat.com> 4.8.5-39\u*@- fix pr63567-2.c and pr63567-4.c�;��jc��Marek Polacek <polacek@redhat.com> 4.8.5-38\s�- fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442) - allow libitm to use HTM (#1659698) - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891) - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814) - enable initializing statics with COMPOUND_LITERAL_EXPR in C99 (#1672652, PR c/63567) - fix PIC_OFFSET_TABLE_REGNUM (#1614326) - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784) - fix ICE with alias template (#1648161, PR c++/53658) � �R ~ q � _ � M|�Am`� N�<k � ���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��~i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���}i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. e D � } � � E��c��X�w�$ e �:��$k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���#u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��"u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���!i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L�� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands��� s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7����U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions m z� � � K ��i� r���Nz m ���8i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��7q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��6i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���5i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��4q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��3��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���2� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��1� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���0s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���/{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��.k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���-u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��,u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���+i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��*q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��)i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���(� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��'� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���&s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���%{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 � J� � h � � ] �|�)j�X��Lxk � �1��Mu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Li�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��Kq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Ji�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���I� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��H� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Gs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���F{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Ek� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Du�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Cu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Bi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��Aq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��@i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���?i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��>� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���=s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���<{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��;k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���:u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��9u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 c� � � ' k ��/"l���- � ��ai�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���`i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��_� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���^s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���]{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��\k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���[u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Zu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Yi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��Xq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Wi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���Vi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��Uq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��T��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���S� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��R� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Qs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���P{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Ok� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Nu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260 � , i � � � * ��X��v�� �7��u��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���t� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��s� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���rs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���q{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��pk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���ou�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��nu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���mi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��lq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��ki�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���j� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��i� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���hs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���g{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��fk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���eu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��du�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ci�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��bq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 � F 9 � � � d� ���@3}�! � ���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L�� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���~{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��}k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���|u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��{u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���zi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��yq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��xi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���wi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��vq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. = t� h � � � 4 u�c��<�u� � = �1�� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7����U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L�� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands��� s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365 � c� � � � ? 2|� �=�.!k � ���1u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��0u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���/i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��.q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��-i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���,� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��+� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���*s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���){� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��(k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���'u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��&u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���%i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��$q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��#i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���"i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��!� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands��� s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��� {� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260 H A�/ ^ � N A��� l�'��� H �O��Eq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Di�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���Ci�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��B� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���As� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���@{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��?k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���>u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��=u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���<i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��;q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��:i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���9i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��8q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��7��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���6� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��5� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���4s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���3{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��2k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008 � �= � � [ � � d ���,��J��S� � �5��Yq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��X��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���W� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��V� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Us� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���T{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Sk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Ru�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Qu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Pi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��Oq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Ni�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���M� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��L� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Ks� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���J{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Ik� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Hu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Gu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Fi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1 ^ �R ~ q � _ � M|o���7��U� � ^ ���n� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��m� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���ls� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���k{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��jk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���iu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��hu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���gi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��fq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��ei�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���di�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��c� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���bs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���a{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��`k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���_u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��^u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���]i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��\q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��[i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���Zi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. R _� ~ � + l � Z ��3yl���4� � R ���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���~i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��}q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��|i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���{i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��zq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��y��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���x� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��w� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���vs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���u{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��tk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���su�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��ru�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���qi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��pq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��oi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well. � t� � � ! ^ � |� ��M��k � ���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands��� s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��� {� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365 V /� � q ���=~�l��� V �1��*u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���)i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��(q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��'i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���&i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��%� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���$s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���#{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��"k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���!u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7����U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands � c� � � ' � � ��R� ��Z�� � � ��>i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���=i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��<q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��;��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���:� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��9� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���8s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���7{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��6k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���5u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��4u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���3i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��2q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��1i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���0� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��/� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���.s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���-{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��,k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���+u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260 � , i � � � * |���H�w� k � �O��Sq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Ri�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���Q� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��P� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Os� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���N{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Mk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Lu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Ku�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Ji�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��Iq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��Hi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���Gi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��F� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Es� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���D{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Ck� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Bu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Au�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���@i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��?q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 j �= � � [ � � d ���@l_� M�; j �L��g� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���fs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���e{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��dk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���cu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��bu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ai�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��`q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��_i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���^i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��]q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��\��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���[� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��Z� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���Ys� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���X{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��Wk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���Vu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��Uu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���Ti�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1 � �R ~ q � _ � M|�Am`� N�<k � ���|� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��{� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���zs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���y{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��xk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���wu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��vu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ui�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��tq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��si�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���r� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��q� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���ps� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���o{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��nk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���mu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��lu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���ki�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��jq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��ii�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���hi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. e D � } � � E��c��X�w�$ e �:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �� i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5��~q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7��}��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions m z� � � K ��i� r���Nz m ���#i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��"q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��!i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�� q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�7�� ��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions��� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L�� � � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 � J� � h � � ] �|�)j�X��Lxk � �1��8u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���7i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��6q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��5i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���4� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��3� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���2s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���1{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��0k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���/u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��.u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387���-i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O��,q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� ��+i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.���*i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�L��)� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���(s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���'{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��&k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���%u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1��$u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 2 c� � � ' k � ������2 �P��H� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��G� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��F� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��E� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��D� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��C� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��B� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��A� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��@� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�7��?��U�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.8.3.1-25.tuxcare.els3f~��- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions���>� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els2f"@- CVE-2023-23946: apply - fix writing behind newly created symbolic links�L��=� � �Linar Nadeev <lnadeev@cloudlinux.com> - 1.8.3.1-25.tuxcare.els1e��@- CVE-2021-40330: forbid newlines in host and path in git_connect() - CVE-2022-39260: shell - limit size of interactive commands���<s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365���;{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:��:k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008���9u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260 � � � � � �> 6a � �P��T� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��S� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��R� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��Q� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��P� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��O� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��N� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��M� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��L� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��K� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��J� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��I� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�x � 72d9602ddc8a2ca5b6192473a25aac6a282f1ac3dce11f55a4ad37d2fb9be7efD�w � 4863c82ad5f6d3c05e63e92a8b7d4d5d996d7d31bf0c5d6b508b5d1ed2b1ea82D�v � ddf07c95d3d0f05a6e90db96d75318560db7d296116bc259c53abb8fbac90e60D�u � 1a8c90764ec9aa73c7420b2ae6bddaa8e280d28f784b6c5612e2de4771cec5ceD�t � 2e085f568d9db8dee28478a5408f8be9461c05f16fe8f31a9f07775598a64953D�s � 3b446b4d552e9d079eb480ce483a9e11ad6f68e72325eb45a2522e4defa02f93D�r � 12c058444208cc47570a002bf9e206f51a1b807ca69210f6b18d101dc1890af7D�q � dc464731f0f4a0014db0703a4f675bf9cf637dfe0f857f25857a4a52086d382bD�p � 5c729bb4a5679ea349b73c12a7eceaeee1aa107ee330928c12501ef00a66b962D�o � da6282b8d1bf08c228ae8e6e4ed99ef622a58cf26b67aaf4b0a3d790acf79073D�n � 7fe85a67fa6cfffffd30b51bbddf5c5300fe3b289ed196701a148f55d8d8613fD�m � dcb84b66986d4ccecebaa43234ef071a68cd28c3f623acb0451b8f0a57f27b0bD�l � e8660fc02747ba305700b3ecc58df1e1cc7202f836e39679b54411ed06c25426D�k � aa5b6f21c1c116356f240d976a64dc21f6b8245137bf77f662c9084800a1207aD�j � b29b6dcc3d1e84e5a5a9818b0a289c1f7c1f19cb0c9be0542ababae32b4fc727D�i � 21e9fa45ecd1d364aa50dc54565a1432a98d720eecddc6723ae518ed0774b681D�h � d5b2454d89c894f7728227ae72399632b48e72905f239034283f4cc5e87f6250D�g � 4537271ee6ca2fb395db75b005636443eba93cfac8c840463745c149352b63e5D�f � ac23d2924a99a4aa3ea56bfb20ad715672af1a8ef3c16edcabb404f8e7a9d827D�e � 513bd9ab7bb3a2bdc29115658ce1f357e6bbb06384a7a26838c63160e8f1611fD�d � 2b8b336ff042ff289f6331e8b8d34024c2e14c8b25e3ea706e9e5ce8a8268669D�c � 8d54c5d0996505e030a3fbd8366ba28137028f1cc50fc1f4447dd07bced92d53D�b � dcca20ad39aca8d360409fe0f1e28b74be3875af733340212311d8773245ddd3D�a � e1fe28ff1060d0bbdc0c68a24fd9f9c738841b617398d673bbf1ec4bc24364acD�` � ecbb502588dda28354c8980f99247eee6df7921272bbc22213aff3b46c406decD�_ � f57681bfe0c925d36034e306020906b6a19a9b3c2a1230b7fa52b743572ec832D�^ � d8585dd8e1c9c9190eaf57a1856223a4ef6f5e7fae90d1b364ef5c08b74c1b67D�] � d4fc9779f6875eddc3d6636d1d4e948e75e244b7c5631e30947f22dc76c3cc2cD�\ � 8fa37c166f2c541669e5d6326309c4114a29eee50b6512468b3408cf7840c7d8D�[ � 9d0ad7ed0dd9de415b2349c163f4f663d93d7072ffb8e931326eddfabf5a589eD�Z � 0d7184fd355a508ecf6b556571f7586e2e77af8c5f60bb63fbe2818a4889c5a1D�Y � a05ad2080b53324ae8ef50489d262519a25cfce90c1ac0da17027d3324942774D�X � 8f3f29f8ac162e4012f16703d8c17205c9bb49df3f45391895c60891af700891D�W � ef45124bf963effe85a6fc4074d26a761a0b8033b74882ae7a138aec29302a80D�V � e29ba0e7afc62140ead872991c7cc8450dd9c4821d5ce96a92a7a4ebd7f4ffc5D�U � 51dd6f076fc015241f6bc3485b1a23edb4263af076fffdcbd82137be7b22cd86D�T � 58e1e3856d32511eac314025ae5cd5130f2e0b89639978747bf3af8a6aa575a7D�S � 7c51f5612df8587557067ee0c11c3ec7c47388618bebe0fe8db001eb28374b1aD�R � d87f34b2f7efa36d2e100add51442de9834b6ac75ed526f78a2c13af7bd15c26D�Q � 1780fed82d2205a7c33c7f1657333699a0f2c04d43912258dc938ea23a0b1d61D�P � eedc2b0a56f8794d7c57cc80c2877341185ab50167775f6605eb5677571b8d71D�O � 8a79c893e15ddcd824413e6d18140ada819e02fba55abb3f0c3c363b7dad0fc2D�N � f4e0743ece8850836d3ca4918e4d7b016a783b3854d6287b6b9f69a4c233c2c1D�M � 0dcc715d8e19c391d0fa21583310a785437c7af5dde363a868b2530dfb9fcfbdD�L � e39199f5f707d43e7e4e0b936e5a7065864496de741845fb407b32aa1075d1bfD�K � 6b9e23e9295256c8990ded2ffdb1be13381fa7c84be673fae908f331cae8ffecD�J � cf732bd2a3e2f801046b0b2804827b7ac6a058b871ec5b2e99e36cad21e6ee82D�I � c3cc4d01b12c10581589e9c08fae74def83745ac7883e20cbb12c2a454eecc8dD�H � 83ddca89f88cdf4b27ead263d4067d7dd5ccbc47fb782c958fc530a7c51611d2D�G � 3148626c4a62d3d6e52ce70311bcef66c42764177c6742fe84088a1ddb72ff98D�F � 8d9f2806cb01fe1f825cb9b88f3ba7b81e597f27a26b6ea457d77f03fdd13909D�E � 18e10c0d6049fad59f96cbbf5b5c9c4ae974a58990a940ba3e5add29997f51f0D�D � 4ada1f58805e03b6e20c9d19b40073a25a9f9a8eb6a1d31c177a1652bddda8d3D�C � 5b47b3ffebf914a1c0b23ba92c2d5dd4767fb1e86997395cd9ef0dd250d29f7dD�B � 6eb0840e4db7d096c9b4ee52b85023c302beb0b7a1f221741676b346650b16c6D�A � c9c0b5bc6852c016721f3331136fb29e14c4f607f464a37c5f9347b84ce95c55 3 � � � � �l�<�C� � � 3 r��dm{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��cm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���bm�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��aW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��`i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��_s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��^s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��]i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��\i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��[i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�.��Z� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��Y� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�P��X� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��W� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test�P��V� ��Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els1ev@- CVE-2021-27218: gbytearray: Do not accept too large byte arrays - Enable internal tests - Skip several failed tests from the check�.��U� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 2.56.1-9.tuxcare.els2e S�- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - CVE-2023-32636: Fix a wrong timeout in fuzz_variant_text() - CVE-2023-32643: Fix a heap-buffer-overflow in g_variant_serialised_get_child() - Fix g_test_bug assertion in gvariant test b �/ { � � L � Fl��%q���B�< b �U��ym�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���xm�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��wW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��vi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��us�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��ts]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��si� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��ri�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��qi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��p� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��om{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��nm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���mm�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��lW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��ki��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��js�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��is]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��hi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��gi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��fi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��e� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" � �5 � � � � i ���+����_� ���m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�� W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�� i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �� s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �� s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��~i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��}i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��|i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��{� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��zm{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263) � & � [ � + � E ���� �Q�!�;� � � i��#W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��"i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��!s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P�� � ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules Y g � � F � � c�]� �<� � Y �5��8i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��7s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��6s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��5i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��4i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��3i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��2� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��1m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��0m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���/m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��.W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��-i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��,s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��+s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��*i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��)i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��(i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��'� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��&m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��%m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���$m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803) L �� � U � % � ?�����K�#�t" L �Q��NW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh.N��M]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��LSU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec fileU��KQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��JE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��IE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support�P��H� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��Gm{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��Fm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���Em�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��DW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5��Ci��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� ��Bs�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f��As]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x��@i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/��?i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x��>i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�P��=� ��Linar Nadeev <lnadeev@cloudlinux.com> - 2.17-326.3.tuxcare.els1fz�@- CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 - CVE-2021-35942: wordexp - handle overflow in positional parameter number - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix"r��<m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U��;m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules���:m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i��9W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) ' Y �C�J � � M � r � � � � ? � N �q��> ��@ �>���< � Y � ��ue�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��tWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack���sW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��re�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases3��qK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��pee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��oei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��n[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��mE �Tim Powers <timp@redhat.com>>.��- rebuiltH��le/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���ke�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��je� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���ig�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��hg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��gE3�Tim Powers <timp@redhat.com>=@- automated rebuild��fe��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��eE3�Tim Powers <timp@redhat.com><��- automated rebuildn��dku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��ck �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��beG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src:��aE3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��`K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��_U�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��^O=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��]e/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��\g+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1r��[O��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��ZM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���YQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��XU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Wg/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��VM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Ug+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��TE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��SSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��R]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���QO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��PSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��OS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8) ( _ �o8�w) � � F � � a � � : � L � a��K�>^��F��\��)�s' � _ X�� eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h�� ]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336)m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH��e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T��eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p��e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[��e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p��i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP�� e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA�� e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos�� k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b�� a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8�3�� _� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){��a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patchG��i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg��oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m��ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]�� eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��~] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��}eo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��|K �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��{e3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��zg?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��yeo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��xK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��wK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��vgI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16 " P �� � h � \ � { & � i � Gl���� �[�t��E��2 � P |��?y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��>yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��=a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24N��<a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��;ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���:y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��9y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelogt��8{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��7y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��6i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���5� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��4iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��3iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��2� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��1i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���0� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��/iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��.i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��-i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files� ��,{��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data���+� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��*{1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��){K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��(w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1U��'w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���&w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm��%ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)���$���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@��#e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^��"e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr��!e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)��� a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF�� e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec file $ � �#�2 # � � � c � b�#�6��$��F�b �_�!��D � � n��cku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��bk �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��aeG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src:��`E3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��_K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��^U�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��]O=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��\e/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��[g+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1r��ZO��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��YM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���XQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��WU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Vg/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��UM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Tg+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��SE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��RSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��Q]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���PO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��OSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��NS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8)�Q��MW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh.N��L]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��KSU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec fileU��JQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��IE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��HE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support� ��G� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��F}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��E}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��D}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��C{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��B{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��A{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��@yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689 % �? � � A � ? � � � =�Z ��&��L��W��J���C� �3��_� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){��a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patchG��i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg��oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m��ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7�� S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]��eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��~]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��}] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��|eo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��{K �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��ze3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��yg?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��xeo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��wK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��vK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��ugI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16� ��te�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��sWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack���rW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��qe�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases3��pK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��oee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��nei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��m[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��lE �Tim Powers <timp@redhat.com>>.��- rebuiltH��ke/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���je�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��ie� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���hg�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��gg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��fE3�Tim Powers <timp@redhat.com>=@- automated rebuild��ee��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��dE3�Tim Powers <timp@redhat.com><��- automated rebuild # � �] � � A � � S � B � � %�~�l�:�b ��1�w � � � ��+{��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data���*� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��){1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��({K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��'w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1U��&w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���%w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm��$ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)���#���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@��"e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^��!e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr�� e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)��� a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF�� e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec fileX�� eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h��]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336)m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH��e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T��eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p��e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[��e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p�� i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP�� e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA�� e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos�� k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b�� a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8 k %�P � N � v w - � \ ���=�� �,�;,���l � k N��K]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��JSU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec fileU��IQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��HE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��GE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support� ��F� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��E}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��D}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��C}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��B{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��A{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��@{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��?yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689|��>y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��=yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��<a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24N��;a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��:ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���9y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��8y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelogt��7{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��6y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��5i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���4� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��3iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��2iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��1� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��0i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���/� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��.iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��-i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��,i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files & f *�m � t % � w 1 � � � H � � i�x:��)�h*E�=�j6�h� � f ���qW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��pe�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases3��oK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��nee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��mei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��l[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��kE �Tim Powers <timp@redhat.com>>.��- rebuiltH��je/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���ie�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��he� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���gg�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��fg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��eE3�Tim Powers <timp@redhat.com>=@- automated rebuild��de��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��cE3�Tim Powers <timp@redhat.com><��- automated rebuildn��bku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��ak �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��`eG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src:��_E3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��^K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��]U�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��\O=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��[e/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��Zg+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1r��YO��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��XM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���WQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��VU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Ug/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��TM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Sg+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��RE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��QSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��P]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���OO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��NSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��MS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8)�Q��LW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh. ' � � ��U � � F � c � ~ � W � i ~��h#�[{�c�y�F � � W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336)m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH��e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T��eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p��e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[�� e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p�� i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP�� e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA�� e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos�� k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b��a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8�3��_� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){��a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patchG��i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg��oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m�� ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]��~eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��}]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��|] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��{eo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��zK �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��ye3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��xg?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��weo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��vK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��uK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��tgI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16� ��se�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��rWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack " p �H�� p � � T � H � g � U�3X���� �G�`��1 � p N��:a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��9ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���8y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��7y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelogt��6{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��5y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��4i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���3� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��2iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��1iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��0� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��/i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���.� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��-iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��,i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��+i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files� ��*{��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data���)� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��({1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��'{K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��&w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1U��%w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���$w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm��#ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)���"���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@��!e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^�� e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr�� e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)��� a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF�� e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec fileX��eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h��]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4 $ h �L�b � | � � N � W � /��.X���S��_�.�v+�� � � h :��^E3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��]K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��\U�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��[O=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��Ze/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��Yg+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1r��XO��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��WM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���VQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��UU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Tg/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��SM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Rg+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��QE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��PSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��O]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���NO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��MSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��LS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8)�Q��KW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh.N��J]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��ISU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec fileU��HQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��GE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��FE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support� ��E� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��D}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��C}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��B}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��A{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��@{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��?{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��>yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689|��=y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��<yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��;a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24 ' � �a��. � | 0 � � . � ��,�I����r;��F��9���2 � ���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){��a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patchG��i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg�� oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m��ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��~S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]��}eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��|]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��{] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��zeo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��yK �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��xe3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��wg?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��veo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��uK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��tK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��sgI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16� ��re�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��qWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack���pW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��oe�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases3��nK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��mee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��lei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��k[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��jE �Tim Powers <timp@redhat.com>>.��- rebuiltH��ie/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���he�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��ge� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���fg�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��eg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��dE3�Tim Powers <timp@redhat.com>=@- automated rebuild��ce��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��bE3�Tim Powers <timp@redhat.com><��- automated rebuildn��aku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��`k �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��_eG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src # � Ha � � Q � � � 1 � � J � � !�m�Z��� �f�Z�y$�g � ���(� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��'{1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��&{K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��%w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1U��$w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���#w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm��"ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)���!���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@�� e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^�� e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr�� e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)��� a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF��e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec fileX��eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h��]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336)m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH��e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T��eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p�� e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[�� e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p�� i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP�� e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA�� e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos��k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b��a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8�3��_� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes � {�+ � . � S � � � � O � y �f��4���h � � U��GQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��FE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��EE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support� ��D� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��C}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��B}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��A}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��@{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��?{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��>{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��=yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689|��<y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��;yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��:a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24N��9a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��8ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���7y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��6y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelogt��5{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��4y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��3i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���2� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��1iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��0iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��/� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��.i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���-� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��,iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��+i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��*i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files� ��){��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data &" �X� � , � } � � < � X � U ���:��C������)�Y" 3��mK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��lee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��kei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��j[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��iE �Tim Powers <timp@redhat.com>>.��- rebuiltH��he/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���ge�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��fe� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���eg�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��dg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��cE3�Tim Powers <timp@redhat.com>=@- automated rebuild��be��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��aE3�Tim Powers <timp@redhat.com><��- automated rebuildn��`ku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��_k �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��^eG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src:��]E3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��\K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��[U�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��ZO=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��Ye/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��Xg+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1r��WO��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��VM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���UQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��TU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Sg/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��RM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Qg+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��PE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��OSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��N]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���MO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��LSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��KS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8)�Q��JW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh.N��I]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��HSU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec file % � 1�J � _ ( � � 0 � � ? � � U � >�t�b{�k��K��d � m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH��e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T�� eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p�� e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[�� e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p�� i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP�� e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA��e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos��k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b��a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8�3��_� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){��a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patchG�� i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg��oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m��~ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��}S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]��|eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��{]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��z] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��yeo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��xK �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��we3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��vg?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��ueo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��tK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��sK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��rgI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16� ��qe�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��pWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack���oW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��ne�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases " �>��< � t * � � � � A � H��5�@��k n �1�2�� t��4{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��3y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��2i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���1� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��0iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��/iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��.� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��-i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���,� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��+iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��*i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��)i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files� ��({��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data���'� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��&{1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��%{K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��$w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1U��#w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���"w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm��!ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@�� e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^�� e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr�� e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)��� a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF��e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec fileX��eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h��]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336) " W .�3 � � - � C � ] � � /�8��a9�|��4��@�� � W r��VO��Preston Brown <pbrown@redhat.com>9�v�- devel subpackage depends on main package so that .so symlink is OK.>��UM3�Prospector <bugzilla@redhat.com>9m�@- automatic rebuild���TQ�_�Nalin Dahyabhai <nalin@redhat.com>98�@- switch to the configure and makeinstall macros - FHS-compliance fixing - move docs to non-devel packageD��SU7�Bill Nottingham <notting@redhat.com>9 }A- libtoolize for ia64I��Rg/�Florian La Roche <Florian.LaRoche@redhat.com>9 }@- update to 3.0.1B��QM;�Jakub Jelinek <jakub@redhat.com>9+�- sparc64 fixes for 3.0G��Pg+�Florian La Roche <Florian.LaRoche@redhat.com>9�@- update to 3.0_��OE}�Matt Wilson <msw@redhat.com>8��@- #include <string.h> in files that use string functionsK��NSG�Cristian Gafton <gafton@redhat.com>8� @- fix description and summary\��M]_�Michael K. Johnson <johnsonm@redhat.com>8K�@- s/GPL/LGPL/ - build as non-root (#7604)���LO�[�Jakub Jelinek <jj@ultra.linux.cz>7Ӭ�- merge in some debian gmp fixes - Ulrich Drepper's __gmp_scale2 fix - my mpf_set_q fix - sparc64 fixesP��KSQ�Cristian Gafton <gafton@redhat.com>7&�@- add sparc patch for PIC handlinge��JS{�Cristian Gafton <gafton@redhat.com>6��@- auto rebuild in the new build environment (release 8)�Q��IW�M�Michael Johnson <johnsonm@redhat.com>6��@- include the private header file gmp-mparam.h because several apps seem to assume that they are building against the gmp source tree and require it. Sigh.N��H]C�Michael K. Johnson <johnsonm@redhat.com>6�9@- libtoolize to work on armR��GSU�Cristian Gafton <gafton@redhat.com>5��@- yet another touch of the spec fileU��FQ]�Michael Fulbright <msf@redhat.com>5�3@- looked over before inclusion in RH 5.2}��EE�7�Dick Porter <dick@cymru.net>5h �- Patch Makefile.in, not Makefile - Don't specify i586, let configure decide the arch�"��DE��Marc Ewing <marc@redhat.com>4��- started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu> - cleaned up file list - fixed up install-info support� ��C� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��B}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��A}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��@}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��?{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��>{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��={g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��<yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689|��;y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��:yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��9a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24N��8a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��7ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���6y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��5y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelog ) u �i!w0 � � S � � � � q � n "�� ��� �;��s�d-��8��+ � u G��i)�Thomas Woerner <twoerner@redhat.com> - 4.1.4-7D��@- release bumpg��~oc�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2.1C�@- bump again for double-long bug on ppc(64)m��}ks�Jesse Keating <jkeating@redhat.com> - 4.1.4-6.2C�- rebuilt for new gcc4.1 snapshot and glibc changes7��|S �Jesse Keating <jkeating@redhat.com>C�q�- rebuilt]��{eY�Thomas Woerner <twoerner@redhat.com> 4.1.4-6Bc�@- fixed __setfpucw call in mpfr-test.hE��z]1�Karsten Hopp <karsten@redhat.de> 4.1.4-5B%��- build with gcc-4<��y] �Karsten Hopp <karsten@redhat.de> 4.1.4-4B �@- rebuilth��xeo�Florian La Roche <Florian.LaRoche@redhat.de>AV�@- 4.1.4 - disable ppc64 patch, now fixed upstream3��wK �Elliot Lee <sopwith@redhat.com>@��- rebuiltJ��ve3�Thomas Woerner <twoerner@redhat.com> 4.1.3-1@��- new version 4.1.3Q��ug?�Thomas Woerner <twoerner@redhat.com> 4.1.2-14@j��- dropped RPATH (#118506)h��teo�Florian La Roche <Florian.LaRoche@redhat.de>@I�@- also build SSE2 DSOs, patch from Ulrich Drepper3��sK �Elliot Lee <sopwith@redhat.com>@Dw@- rebuilt3��rK �Elliot Lee <sopwith@redhat.com>@,�@- rebuiltV��qgI�Thomas Woerner <twoerner@redhat.com> 4.1.2-11@��- BuildRequires for automake16� ��pe�5�Florian La Roche <Florian.LaRoche@redhat.de>?�-@- fix symlink to libgmpxx.so.3 #111135 - add patch to factorize.c from gmp homepageN��oWI�Joe Orton <jorton@redhat.com> 4.1.2-9?��- build with -Wa,--noexecstack���nW�K�Joe Orton <jorton@redhat.com> 4.1.2-8?��- build assembly code with -Wa,--execstack - use parallel make - run tests, and fix C++ therein�J��me�1�Florian La Roche <Florian.LaRoche@redhat.de>?|@- enable mpfr #104395 - enable cxx #80195 - add COPYING.LIB - add fixes from gmp web-site - remove some cruft patches for older libtool releases3��lK �Elliot Lee <sopwith@redhat.com>>��@- rebuiltc��kee�Florian La Roche <Florian.LaRoche@redhat.de>>܍�- make configure.in work with newer autoconfe��jei�Florian La Roche <Florian.LaRoche@redhat.de>>��- do not set extra_functions for s390x #92001a��i[k�Elliot Lee <sopwith@redhat.com> 4.1.2-3>K��- Add ppc64 patch, accompanied by running auto*0��hE �Tim Powers <timp@redhat.com>>.��- rebuiltH��ge/�Florian La Roche <Florian.LaRoche@redhat.de>>�@- update to 4.1.2���fe�!�Florian La Roche <Florian.LaRoche@redhat.de>=�- update to 4.1.1 - remove un-necessary patches - adjust s390/x86_64 patchx��ee� �Florian La Roche <Florian.LaRoche@redhat.de>=�%�- add s390x patch - disable current x86-64 support in longlong.h���dg�)�Trond Eivind Glomsrød <teg@redhat.com> 4.1-4=)~�- Add 4 patches, among them one for #67918 - Update URL - s/Copyright/License/�`��cg�[�Trond Eivind Glomsrød <teg@redhat.com> 4.1-3=)~�- Redefine the configure macro, the included configure script isn't happy about the rpm default one (#68190). Also, make sure the included libtool isn't replaced,:��bE3�Tim Powers <timp@redhat.com>=@- automated rebuild��ae��Florian La Roche <Florian.LaRoche@redhat.de><�|�- update to version 4.1 - patch s390 gmp-mparam.h to match other archs.:��`E3�Tim Powers <timp@redhat.com><��- automated rebuildn��_ku�Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-3<��@- Use standard %configure macro and edit %{_tmppath}C��^k �Trond Eivind Glomsrød <teg@redhat.com> 4.0.1-2<{x�- RebuildT��]eG�Florian La Roche <Florian.LaRoche@redhat.de><MT@- update to 4.0.1 - bzip2 src:��\E3�Tim Powers <timp@redhat.com><<0�- automated rebuildC��[K?�Elliot Lee <sopwith@redhat.com>;5�@- Bump release + rebuild.�%��ZU�w�Philipp Knirsch <pknirsch@redhat.de>:~��- Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not correctly identified as a 64 bit platform.D��YO=�Preston Brown <pbrown@redhat.com>:=�@- include bsd mp libraryH��Xe/�Florian La Roche <Florian.LaRoche@redhat.de>9�?@- update to 3.1.1G��Wg+�Florian La Roche <Florian.LaRoche@redhat.com>9�=@- update to 3.1 # � ��' o � � x $ � X �q"�H��9��%�@�3���� � � U��"w7�Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-7K���- fix the license tag���!w��Ivana Hutarova Varekova <varekova@redhat.com> 4.3.1-6K�@- remove unnecessary dependences remove duplicated documentationm�� ey�Ivana Varekova <varekova@redhat.com> 4.3.1-5J� �- fix installation with --excludedocs option (#515947)��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-4Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild@�� e �Ivana Varekova <varekova@redhat.com> 4.3.1-3J8�- rebuild^�� e[�Ivana Varekova <varekova@redhat.com> 4.3.1-2J67�- Resolves: #505592 add RPM_OPT_FLAGSr�� e��Ivana Varekova <varekova@redhat.com> 4.3.1-1J |�- update to 4.3.1 - remove configure macro (built problem)���a�E�Dennis Gilmore <dennis@ausil.us> - 4.2.4-6I��@- no check that --host and --target are the same when building i586 or sparcv9 they are not������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.4-5I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildF��e+�Ivana Varekova <varekova@redhat.com> 4.2.4-4IP�- fix spec fileX��eO�Ivana Varekova <varekova@redhat.com> 4.2.4-3I= @- remove useless option (#475073)h��]w�Stepan Kasal <skasal@redhat.com> 4.2.4-2I6t�- Run full autoreconf, add automake to BuildRequires.H��e/�Ivana Varekova <varekova@redhat.com> 4.2.4-1I"@- update to 4.2.4W��eM�Ivana Varekova <varekova@redhat.com> 4.2.2-9I-�- remove useless patch (#470200)W��oC�Tom "spot" Callaway <tcallawa@redhat.com> 4.2.2-8Hv@- add sparc/sparc64 supportU��eI�Ivana Varekova <varekova@redhat.com> 4.2.2-7G� @- add superH support (#437688)e��ei�Ivana varekova <varekova@redhat.com> 4.2.2-6G��- fix gcc-4.3 problem - add <cstdio> (#432336)m��ey�Ivana Varekova <varekova@redhat.com> 4.2.2-5G�D@- split the devel subpackage to devel and static partsK��e5�Ivana Varekova <varekova@redhat.com> 4.2.2-4G��- change license tagM��e9�Ivana Varekova <varekova@redhat.com> 4.2.2-3F���- fix libgmpxx.so linkF��e+�Ivana Varekova <varekova@redhat.com> 4.2.2-2F�`�- fix check tagH�� e/�Ivana Varekova <varekova@redhat.com> 4.2.2-1F�@- update to 4.2.2T�� eG�Ivana Varekova <varekova@redhat.com> 4.2.1-3Fɂ@- spec file cleanup (#253439)p�� e�Ivana Varekova <varekova@redhat.com> 4.2.1-2F�^�- add arm support (#245456) thanks to Lennert Buytenhek�[�� e�S�Ivana Varekova <varekova@redhat.com> 4.2.1-1F� @- update to 4.2.1 - do some spec cleanups - fix 238794 - gmp-devel depends on {version} but not on {version}-{release} - remove mpfr (moved to separate package)p�� i{�Florian La Roche <laroche@redhat.com> 4.1.4-13F��@- don't fail scripts to e.g. allow excludedocs installsP��e?�Karsten Hopp <karsten@redhat.com> 4.1.4-12.3F-�@- fix library permissionsA��e!�Karsten Hopp <karsten@redhat.com> 4.1.4-12.2E��- fix typos��k�Thomas Woerner <twoerner@redhat.com> 4.1.4-12.1E��- added alpha support for gmp.h and gmp-mparam.h wrappers�b��a�e�Karsten Hopp <karsten@redhat.com> 4.1.4-12E��@- remove trailing dot from summary - fix buildroot - fix post/postun/... requirements - use make install DESTDIR=... - replace tabs with spaces - convert changelog to utf-8�3��_� �Jakub Jelinek <jakub@redhat.com> 4.1.4-11E��- make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371) - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes���g�!�Thomas Woerner <twoerner@redhat.com> 4.1.4-10EI�- fixed arch order in gmp.h and gmp-mparam.h wrapper for all architectures_��Yi�Joe Orton <jorton@redhat.com> 4.1.4-10EI�- include ppc64 header on ppc64 not ppc headerk��iq�Thomas Woerner <twoerner@redhat.com> - 4.1.4-9EA�- fixed multilib devel conflicts for gmp (#212286){�� a��Jakub Jelinek <jakub@redhat.com> - 4.1.4-8E@�@- upgrade mpfr to 2.2.0 (#211971) - apply mpfr 2.2.0 cumulative patch ` �F�Q � � | � B � C��(V�[ �U�k���W � ` � ��B� w�Dmitrii Zudin <dzudin@cloudlinux.com> - 1:6.0.0-15.tuxcare.els1e���- CVE-2021-43618: gmp security and enhancement updaten��A}c�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-15XƉ�- Macro in previous changelog entry escaped� ��@}�=�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-14X�C�- FLAGS filtering moved before calling %configure macro to avoid performance regressions� ��?}��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13X�B�- Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034) - Added a workaround to correctly add hardening flags during build process (bug #1406689)z��>{}�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-12U��@- add hmac checksum to /lib/sse2/... - resolves:#1262803o��={g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-11T�- rebase to 6.0.0 (fixed) - resolves:#1110689o��<{g�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-10T�- rebase to 6.0.0 (fixed) - resolves:#1110689f��;yW�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-9T �@- rebase to 6.0.0 - resolves:#1110689|��:y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-9T�@- added hmac checksums needed for fips - resolves:#1117188^��9yG�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-8S�%@- ppc64le - resolves:#1125516N��8a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-5R�U�- Mass rebuild 2014-01-24N��7a?�Daniel Mach <dmach@redhat.com> - 1:5.1.1-4R�k�- Mass rebuild 2013-12-27k��6ya�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-3Rx�- resolves: #1023791 - support for aarch64���5y��Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.1-2Q �- rebase to 5.1.1 - deleted unapplicable part of gmp-4.0.1-s390.patch�M��4y�#�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1Qs�- rebase to 5.1.0, de-ansi patch no longer applicable - upstream dropped libmp.so (bsdmp-like interface) - silenced bogus date in changelogt��3{q�Peter Robinson <pbrobinson@fedoraproject.org> 1:5.0.5-6P�@- Rebuild against new binutils to fix FTBFS on ARMU��2y5�Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.0.5-5P�e@- minor spec cleanupF��1i'�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-3P H@- fixed FTBFS���0� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild^��/iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.5-1O�R�- resolves: #820897 update to 5.0.5^��.iW�Peter Schiffer <pschiffe@redhat.com> 1:5.0.4-1O��@- resolves: #785116 update to 5.0.4r��-� I�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-6OL��- Rebuilt for c++ ABI breakagea��,i]�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-5O�- fixed FTBFS with gcc 4.7 on 32bit arch���+� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:5.0.2-4O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\��*iS�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-3N�$@- removed old compatibility libraryq��)i}�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-2N�i@- temporary build wild old compatibility library version�V��(i�E�Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1Nx�@- resolves: #702919 update to 5.0.2 - resolves: #738091 removed unused direct shlib dependency on libm updated license in gmp.h and gmp-mparam.h files� ��'{��Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-4M���- Resolves: #706374 fix sse2/libgmp.so.3.5.2 debuginfo data���&� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:4.3.2-3MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildT��%{1�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-2L�A- fix Requires taga��${K�Ivana Hutarova Varekova <varekova@redhat.com> 1:4.3.2-1L�@- downgrade from 5.0.1 to 4.3.2Q��#w/�Ivana Hutarova Varekova <varekova@redhat.com> 5.0.1-1K�j@- update to 5.0.1 % � �� � � P � l � F � n��d ���)�^�E�x� �X � � a��g]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��fkc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��eks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��dc �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���cW�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��bW��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��aW� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��`Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��_Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��^Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��]Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��\c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��[ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��Zcc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��YYi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��XYQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��WY� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��VW1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��UW1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��TE3�Tim Powers <timp@redhat.com>=@- automated rebuildB��SW1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���RW�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��Qa/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��Pa/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��Oa#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��NQ/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�_��M� �!�Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 3.29.3-34.tuxcare.els1gZ�@- CVE-2024-36472: fix portal helper from launching automatically based on network responses to prevent loading untrusted JavaScript codek��Lsg�Florian Müllner <fmuellner@redhat.com> - 3.29.3-34`��- Fix another JS warning Resolves: #1860445q��Kss�Florian Müllner <fmuellner@redhat.com> - 3.28.3-33` l�- Guard against StWidget crash Resolves: #1861428X��JcQ�Ray Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063[��IcW�Ray Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995� ��Hs�%�Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k��Gsg�Florian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121���Fs��Florian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|��Es��Florian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u��Ds{�Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s��Csw�Florian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871 $ � � �m � w � i $ � � � � � ���4�B��i�w �k�I��6 � ��� Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G�� Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm�� W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��~Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��}W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��|WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version���{���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��zWS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��yWS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��xWy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���wW�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��vW9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��uW�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��tWE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���sW�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��rW7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��qWE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��pW/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��oWY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/��nW� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��mW��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��lW�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��k[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��jk �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���i[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��h]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequires ' � s5��< � U � t ) � 0 � � N � �B��^�N����Z�[�( � J��2_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��1_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��0Y��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��/W9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��.WM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��-Wg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��,W9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��+W�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��*[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��)[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��([�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��'[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��&[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��%[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���$� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��#[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��"[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��![9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq�� [� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^�� _a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)��� � ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH�� [9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH�� [9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:�� 3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757��� Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra � q�` � L � | $ � ( � T � ��2��q���:� � � r��Oqw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��Nq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��Mq�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��Lo� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���Ko�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��Joa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��Ios�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��Ho��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��Go�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��Fog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��Eom�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��DoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���Cu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��Bsm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��Ao�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��@s�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��?oO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��>os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���=u�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��<uM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��;u7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��:_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��9q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��8_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��7um�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��6_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���5q� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���4_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��3_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entries 2 ; 3��f� � v 2 @��Xa#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��WQ/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)��V��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��Ui��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���Ti��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/��Sq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���Rq�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���Qq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��Pq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199) & _ �l��b � � � ' � \ � C � v � �V��4�`�u�K��\}- _ �I��~W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��}WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���|W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��{W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��zWE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��yW/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��xWY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/��wW� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��vW��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��uW�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��t[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��sk �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���r[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��q]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��p]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��okc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��nks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��mc �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���lW�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��kW��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��jW� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��iYq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��hYo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��gYi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��fY�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��ec)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��dga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��ccc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��bYi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��aYQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��`Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��_W1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��^W1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��]E3�Tim Powers <timp@redhat.com>=@- automated rebuildB��\W1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���[W�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��Za/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��Ya/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2 ( � � �] k � @ � � � � I � ��r�_�J �v�,��K ��q% � � H��&[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��%[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��$[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��#Y9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��"Y9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��!Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G�� Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG�� Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG�� Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG�� Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG�� Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)��� W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version # � c�@ � � � � B � L � Z��[�r$��3�p��H�L�x � � ��Is�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��HoO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��Gos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���Fu�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��EuM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��Du7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��C_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��Bq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��A_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��@um�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��?_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���>q� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���=_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��<_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��;_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��:_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��9Y��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��8W9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��7WM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��6Wg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��5W9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��4W�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��3[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��2[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��1[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��0[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��/[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��.[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���-� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��,[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��+[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��*[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��)[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��(_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���'� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild O�Q � A � K � G��E� ���Zq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��Yq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��Xqw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��Wq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��Vq�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��Uo� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���To�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��Soa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��Ros�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��Qo��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��Po�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��Oog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��Nom�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��MoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���Lu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��Ksm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��Jo�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705) � k �3��C��k��a� � � S��jYQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��iY� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��hW1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��gW1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��fE3�Tim Powers <timp@redhat.com>=@- automated rebuildB��eW1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���dW�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��ca/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��ba/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��aa#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��`Q/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)��_��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��^i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���]i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/��\q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���[q�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869 % } �8�� � S � w � = � c � � �k�u�g"��������2�@ � } h��W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS�� WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf�� Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)��� W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/�� W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��~W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��}[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��|k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���{[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��z]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��y]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��xkc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��wks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��vc �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���uW�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��tW��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��sW� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��rYq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��qYo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��pYi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��oY�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��nc)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��mga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��lcc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��kYi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged. ( } �A�O � � J � @ � s � / � d �k �9��X _�}1�H�q%�� � } o��7[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���6� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��5[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��4[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��3[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��2[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��1_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���0� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��/[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��.[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��-[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��,Y9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��+Y9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��*Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��)Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��(Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��'Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��&Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��%Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���$���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��#Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��"Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��!Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG�� Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:�� 3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757��� Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra��� Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G�� Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixes !Q �9�^ � � a � I � � � w��(�Y�M�A�?� �.�Q i��Xog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��Wom�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��VoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���Uu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��Tsm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��So�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��Rs�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��QoO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��Pos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���Ou�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��NuM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��Mu7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��L_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��Kq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��J_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��Ium�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��H_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���Gq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���F_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��E_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��D_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��C_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��BY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��AW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��@WM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��?Wg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��>W9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��=W�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��<[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��;[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��:[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��9[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��8[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826) � / � 9 � 5 u � 3 ���[� �/��eq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���dq�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���cq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��bq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��aqw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��`q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��_q�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��^o� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���]o�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��\oa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��[os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��Zo��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��Yo�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 mode R | ���H��.��d )�o �\��%�I � R ���~W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��}W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��|W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��{Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��zYo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��yYi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��xY�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��wc)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��vga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��ucc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��tYi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��sYQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��rY� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��qW1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��pW1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��oE3�Tim Powers <timp@redhat.com>=@- automated rebuildB��nW1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���mW�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��la/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��ka/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��ja#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��iQ/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)��h��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��gi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���fi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125) % p �L�~* � V � k � A � � R s #U s �[�i��>�L��G�= � p S��#WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��"i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��!W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ�� Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version������Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E�� W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L�� WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA�� W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV�� WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/�� W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m�� ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt ' � �D�/ � � [ � � � { 0 � � � � V �r�s��f} �C�h��k � F��JW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��IWM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��HWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��GW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��FW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��E[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��D[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��C[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��B[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��A[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��@[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���?� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��>[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��=[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��<[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��;[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��:_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���9� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��8[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��7[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��6[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��5Y9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��4Y9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��3Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��2Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��1Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��0Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��/Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��.Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���-���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��,Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��+Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��*Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��)Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��(3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���'Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���&Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��%Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��$W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125) u ��: � ) � e � E � � � ~ |�Y�k���:�]� u � ��hq�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��go� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���fo�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��eoa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��dos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��co��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��bo�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��aog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��`om�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��_oQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���^u��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��]sm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��\o�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��[s�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��ZoO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��Yos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���Xu�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��WuM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��Vu7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��U_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��Tq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��S_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��Rum�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��Q_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���Pq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���O_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��N_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��M_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��L_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��KY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+ � L� t�<� |��pi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���oi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/��nq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���mq�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���lq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��kq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��jqw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��iq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696) " � � � L � 2 � � h " - � s �`��)�M�V�9����A�K � �/��W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild��� [�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP�� ]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa�� ]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e�� kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m�� ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD�� c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��~cc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��}Yi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��|YQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��{Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��zW1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��yW1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��xE3�Tim Powers <timp@redhat.com>=@- automated rebuildB��wW1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���vW�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��ua/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��ta/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��sa#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��rQ/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)��q��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption. ' _ �a�2 � � 2 � q ( � T�� �]���/�s�^ ��'�@ � � _ G��9Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��8Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��7Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���6���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��5Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��4Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��3Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��2Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��13E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���0Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���/Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��.Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��-W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��,WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��+i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��*W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��)Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��(WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��'WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��&WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version���%���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��$WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��#WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��"Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��!W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS�� WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS�� WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS�� WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf�� Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445) & � �j�q& � � B � C � � 6 � M � _ �8���;��#�f�Q�u�3 � � T��_u7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��^_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��]q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��\_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��[um�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��Z_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���Yq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���X_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��W_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��V_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��U_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��TY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��SW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��RWM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��QWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��PW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��OW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��N[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��M[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��L[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��K[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��J[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��I[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���H� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��G[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��F[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��E[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��D[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��C_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���B� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��A[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��@[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��?[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��>Y9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��=Y9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��<Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��;Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��:Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream version � ��0 � � l � ~ ��M�p���^� � ���uq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��tq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��sqw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��rq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��qq�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��po� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���oo�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��noa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��mos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��lo��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��ko�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��jog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��iom�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��hoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���gu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��fsm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��eo�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��ds�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��coO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��bos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���au�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��`uM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815) � k �3��C��k��a� � � S��YQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��W1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��W1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��E3�Tim Powers <timp@redhat.com>=@- automated rebuildB�� W1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���W�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��~a/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��}a/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��|a#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��{Q/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)��z��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��yi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���xi��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/��wq�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���vq�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869 % } �8�� � S � w � = � c � � �k�u�g"��������2�@ � } h��*W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��)WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version���(���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��'WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��&WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��%Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���$W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��#W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��"W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��!WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream��� W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E�� W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L�� WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA�� W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV�� WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/��W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c�� Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb�� Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_�� Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj�� Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD�� c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��cc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��Yi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged. ( } �A�O � � J � @ � s � / � d �k �9��X _�}1�H�q%�� � } o��R[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���Q� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��P[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��O[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��N[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��M[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��L_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���K� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��J[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��I[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��H[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��GY9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��FY9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��EY�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��DY9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��CY9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��BY9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��AY9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��@Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���?���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��>Y9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��=Yi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��<Y9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��;Y9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��:3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���9Y�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���8Y�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��7Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��6W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��5WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��4i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��3W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��2Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��1WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��0WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��/WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version���.���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��-WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��,WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��+Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixes !Q �9�^ � � a � I � � � w��(�Y�M�A�?� �.�Q i��sog�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��rom�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��qoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���pu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��osm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��no�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��ms�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��loO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��kos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���ju�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��iuM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��hu7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��g_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��fq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��e_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��dum�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��c_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���bq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���a_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��`_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��__9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��^_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��]Y��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��\W9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��[WM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��ZWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��YW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��XW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��W[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��V[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��U[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��T[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��S[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826) � / � 9 � 5 u � 3 ���[� �/�� q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���q�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���~q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��}q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��|qw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��{q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��zq�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��yo� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���xo�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��woa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��vos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��uo��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��to�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 mode R | ���H��.��d )�o �\��%�I � R ���W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��cc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��Yi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��YQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p�� Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B�� W1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B�� W1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:�� E3�Tim Powers <timp@redhat.com>=@- automated rebuildB�� W1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���W�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��a#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��Q/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)����O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125) % p �L�~* � V � k � A � � R s #U s �[�i��>�L��G�= � p S��>WS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��=i�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��<W�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��;Wa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��:WS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��9WS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��8WS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version���7���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��6WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��5WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��4Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��3W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��2WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version���1���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��0WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��/WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��.Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���-W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��,W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��+W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��*WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���)W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��(W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��'WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��&W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��%WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/��$W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��#W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��"W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��![w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC�� k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild��� [�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP�� ]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa�� ]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e�� kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt ' � �D�/ � � [ � � � { 0 � � � � V �r�s��f} �C�h��k � F��eW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��dWM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��cWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��bW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��aW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��`[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��_[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��^[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��][9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��\[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��[[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���Z� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��Y[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��X[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��W[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��V[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��U_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���T� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��S[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��R[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��Q[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��PY9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��OY9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��NY�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��MY9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��LY9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��KY9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��JY9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��IY9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���H���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��GY9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��FYi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��EY9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��DY9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��C3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���BY�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���AY�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��@Y9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��?W��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125) u ��: � ) � e � E � � � ~ |�Y�k���:�]� u � ��q�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��o� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���o�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f�� oa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��~o��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��}o�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��|og�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��{om�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��zoQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���yu��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��xsm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,��wo�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��vs�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��uoO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��tos�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���su�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��ruM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��qu7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��p_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��oq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��n_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��mum�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��l_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���kq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���j_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��i_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��h_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��g_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��fY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+ � L� t�<� |�� i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)��� i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/�� q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���q�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��qw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696) " � � � L � 2 � � h " - � s �`��)�M�V�9����A�K � �/��-W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��,W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��+W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��*[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��)k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���([�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��']G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��&]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��%kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��$ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��#c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���"W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��!W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q�� W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c�� Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb�� Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_�� Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj�� Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��cc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��Yi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged.S��YQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p��Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B��W1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B��W1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:��E3�Tim Powers <timp@redhat.com>=@- automated rebuildB��W1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���W�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��a#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>�� Q/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)�� ��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption. ' _ �a�2 � � 2 � q ( � T�� �]���/�s�^ ��'�@ � � _ G��TY9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��SY9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��RY9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���Q���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��PY9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��OYi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��NY9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��MY9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��L3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���KY�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���JY�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��IY9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��HW��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��GWS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��Fi�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��EW�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��DWa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��CWS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��BWS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��AWS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version���@���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��?WS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��>WS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��=Wu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixesh��<W}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��;WS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version���:���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��9WS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��8WS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��7Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���6W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��5W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��4W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��3WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���2W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��1W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��0WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��/W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��.WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445) & � �j�q& � � B � C � � 6 � M � _ �8���;��#�f�Q�u�3 � � T��zu7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��y_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��xq��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L��w_=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��vum�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��u_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���tq� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���s_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��r_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��q_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��p_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��oY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��nW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��mWM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��lWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��kW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��jW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��i[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��h[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��g[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��f[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��e[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826)o��d[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���c� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��b[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��a[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��`[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��_[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��^_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���]� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��\[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��[[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��Z[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��YY9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��XY9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��WY�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��VY9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��UY9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream version � ��0 � � l � ~ ��M�p���^� � ���q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��qw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/�� q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� �� q�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;�� o� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)��� o�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f�� oa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��o��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��o�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 modei��og�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l��om�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^��oQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release���u��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn��sm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,�� o�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��s�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��~oO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��}os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���|u�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��{uM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815) � k �3��C��k��a� � � S�� YQ�Jeff Johnson <jbj@redhat.com> 1.0.20-2A=��- patent tainted SRP code removed.�p�� Y� �Jeff Johnson <jbj@redhat.com> 1.0.20-1A:��- update to 1.0.20. - add --with-included-opencdk --with-included-libtasn1 - add --with-included-libcfg --with-included-lzo - add --disable-srp-authentication. - do "make check" after build.B�� W1�Jeff Johnson <jbj@redhat.com> 0.9.2-1>z��- upgrade to 0.9.2B�� W1�Jeff Johnson <jbj@redhat.com> 0.4.4-1=[@- update to 0.4.4.:�� E3�Tim Powers <timp@redhat.com>=@- automated rebuildB��W1�Jeff Johnson <jbj@redhat.com> 0.4.3-1<�|�- update to 0.4.3.���W�-�Jeff Johnson <jbj@redhat.com> 0.4.2-1<�6�- update to 0.4.2. - change license to LGPL. - include splint annotations patch.F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1<��@- update to 0.4.0F��a/�Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1<F��- update to 0.3.2@��a#�Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1<=�@- add a URL>��Q/�Nalin Dahyabhai <nalin@redhat.com><!�- initial package�)����O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|��i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)���i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125)�/��q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���q�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869 % } �8�� � S � w � = � c � � �k�u�g"��������2�@ � } h��EW}�Tomas Mraz <tmraz@redhat.com> 2.6.5-1I�z�- upgrade to a new upstream version, minor bugfixes onlyS��DWS�Tomas Mraz <tmraz@redhat.com> 2.6.4-1I�@- upgrade to a new upstream version���C���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2I��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_RebuildS��BWS�Tomas Mraz <tmraz@redhat.com> 2.6.3-1IFF�- upgrade to a new upstream versionS��AWS�Tomas Mraz <tmraz@redhat.com> 2.6.2-1I7�@- upgrade to a new upstream versionf��@Wy�Tomas Mraz <tmraz@redhat.com> 2.4.2-3Is�- fix chain verification issue CVE-2008-4989 (#470079)���?W�Q�Tomas Mraz <tmraz@redhat.com> 2.4.2-2H�}@- add guile subpackage (#463735) - force new libtool through autoreconf to drop unnecessary rpathsF��>W9�Tomas Mraz <tmraz@redhat.com> 2.4.2-1H��@- new upstream version�I��=W�=�Tomas Mraz <tmraz@redhat.com> 2.4.1-1Hj @- new upstream version - correct the license tag - explicit --with-included-opencdk not needed - use external lzo library, internal not included anymoreL��<WE�Tomas Mraz <tmraz@redhat.com> 2.4.0-1H`�- upgrade to latest upstream���;W�M�Tomas Mraz <tmraz@redhat.com> 2.0.4-3H2�@- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 (#447461, #447462, #447463)E��:W7�Joe Orton <jorton@redhat.com> 2.0.4-2G��@- use system libtasn1L��9WE�Tomas Mraz <tmraz@redhat.com> 2.0.4-1GUA@- upgrade to latest upstreamA��8W/�Tomas Mraz <tmraz@redhat.com> 1.6.3-2F��- license tag fixV��7WY�Tomas Mraz <tmraz@redhat.com> 1.6.3-1Ff��- upgrade to latest upstream (#232445)�/��6W� �Tomas Mraz <tmraz@redhat.com> 1.4.5-2F|@- properly require install-info (patch by Ville Skyttä) - standard buildroot and use dist tag - add COPYING and README to docr��5W��Tomas Mraz <tmraz@redhat.com> 1.4.5-1Eɿ@- new upstream version - drop libtermcap-devel from buildrequires|��4W�#�Tomas Mraz <tmraz@redhat.com> 1.4.1-2E D@- detect forged signatures - CVE-2006-4790 (#206411), patch from upstreamg��3[w�Tomas Mraz <tmraz@redhat.com> - 1.4.1-1D��@- upgrade to new upstream version, only minor changesC��2k �Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1D��@- rebuild���1[�7�Tomas Mraz <tmraz@redhat.com> - 1.4.0-1D��@- upgrade to new upstream version (#192070), rebuild of dependent packages requiredP��0]G�Tomas Mraz <tmraz@redhat.com> - 1.2.10-2Di��- added missing buildrequiresa��/]i�Tomas Mraz <tmraz@redhat.com> - 1.2.10-1C�t�- updated to new version (fixes CVE-2006-0645)e��.kc�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2C�@- bump again for double-long bug on ppc(64)m��-ks�Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1C�- rebuilt for new gcc4.1 snapshot and glibc changes?��,c �Jesse Keating <jkeating@redhat.com> 1.2.9-3C�g@- rebuilt���+W�1�Tomas Mraz <tmraz@redhat.com> 1.2.9-2C�q�- replaced *-config scripts with calls to pkg-config to solve multilib conflictsk��*W��Tomas Mraz <tmraz@redhat.com> 1.2.9-1C�Y�- upgrade to newest upstream - removed .la files (#172635)q��)W� �Tomas Mraz <tmraz@redhat.com> 1.2.6-1B���- upgrade to newest upstream (rebuild of dependencies necessary)c��(Yq�Tomas Mraz <tmraz@redhat.com> 1.0.25-2B�$�- split the command line tools to utils subpackageb��'Yo�Tomas Mraz <tmraz@redhat.com> 1.0.25-1Bss@- new upstream version fixes potential DOS attack_��&Yi�Tomas Mraz <tmraz@redhat.com> 1.0.24-2Bj8�- readd the version script dropped by upstreamj��%Y�Tomas Mraz <tmraz@redhat.com> 1.0.24-1Bh�@- update to the latest upstream version on the 1.0 branchD��$c)�Warren Togami <wtogami@redhat.com> 1.0.20-6B%��- gcc4 rebuildb��#ga�Ivana Varekova <varekova@redhat.com> 1.0.20-5Aڅ@- add gnutls Requires zlib-devel (#144069)a��"cc�Colin Walters <walters@redhat.com> 1.0.20-4A�_�- Make gnutls-devel Require libgcrypt-devel_��!Yi�Jeff Johnson <jbj@redhat.com> 1.0.20-3AP�- rebuild with release++, otherwise unchanged. ( } �A�O � � J � @ � s � / � d �k �9��X _�}1�H�q%�� � } o��m[��Tomas Mraz <tmraz@redhat.com> 2.12.20-3P"T�- fix the gnutls-cli-debug manpage - patch by Peter Schiffer���l� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildH��k[9�Tomas Mraz <tmraz@redhat.com> 2.12.20-1O�@- new upstream versionH��j[9�Tomas Mraz <tmraz@redhat.com> 2.12.19-1O�9�- new upstream versionH��i[9�Tomas Mraz <tmraz@redhat.com> 2.12.18-1OtN�- new upstream versionq��h[� �Tomas Mraz <tmraz@redhat.com> 2.12.17-1OX�@- new upstream version - fix leaks in key generation (#796302)^��g_a�Kevin Fenzi <kevin@scrye.com> - 2.12.14-3O+�@- Disable largefile on arm arch. (#787287)���f� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��e[9�Tomas Mraz <tmraz@redhat.com> 2.12.14-1N��- new upstream versionH��d[9�Tomas Mraz <tmraz@redhat.com> 2.12.12-1N�S@- new upstream versionH��c[9�Tomas Mraz <tmraz@redhat.com> 2.12.11-1N�]�- new upstream versionG��bY9�Tomas Mraz <tmraz@redhat.com> 2.12.9-1NW��- new upstream versionG��aY9�Tomas Mraz <tmraz@redhat.com> 2.12.8-1NJ[�- new upstream version�)��`Y�{�Tomas Mraz <tmraz@redhat.com> 2.12.7-2N-Z�- fix problem when using new libgcrypt - split libgnutlsxx to a subpackage (#455146) - drop libgnutls-openssl (#460310)G��_Y9�Tomas Mraz <tmraz@redhat.com> 2.12.7-1N ��- new upstream versionG��^Y9�Tomas Mraz <tmraz@redhat.com> 2.12.4-1M��@- new upstream versionG��]Y9�Tomas Mraz <tmraz@redhat.com> 2.12.3-1M���- new upstream versionG��\Y9�Tomas Mraz <tmraz@redhat.com> 2.12.2-1M�'�- new upstream versionG��[Y9�Tomas Mraz <tmraz@redhat.com> 2.10.5-1Mo��- new upstream version���Z���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_RebuildG��YY9�Tomas Mraz <tmraz@redhat.com> 2.10.4-1L�s@- new upstream version_��XYi�Tomas Mraz <tmraz@redhat.com> 2.10.3-2L��@- fix buffer overflow in gnutls-serv (#659259)G��WY9�Tomas Mraz <tmraz@redhat.com> 2.10.3-1L�f�- new upstream versionG��VY9�Tomas Mraz <tmraz@redhat.com> 2.10.2-1L�{�- new upstream version:��U3E�jkeating - 2.10.1-4L�*@- Rebuilt for gcc bug 634757���TY�9�Tomas Mraz <tmraz@redhat.com> 2.10.1-3L�A@- more patching for internal errors regression (#629858) patch by Vivek Dasmohapatra���SY�/�Tomas Mraz <tmraz@redhat.com> 2.10.1-2L��@- backported patch from upstream git hopefully fixing internal errors (#629858)G��RY9�Tomas Mraz <tmraz@redhat.com> 2.10.1-1LYV@- new upstream versionm��QW��Tomas Mraz <tmraz@redhat.com> 2.8.6-2LG�- add support for safe renegotiation CVE-2009-3555 (#533125)S��PWS�Tomas Mraz <tmraz@redhat.com> 2.8.6-1K�@- upgrade to a new upstream versionr��Oi�Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4Ky7@- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)�'��NW�y�Tomas Mraz <tmraz@redhat.com> 2.8.5-3Ka|@- drop superfluous rpath from binaries - do not call autoreconf during build - specify the license on utils subpackageZ��MWa�Tomas Mraz <tmraz@redhat.com> 2.8.5-2KTM@- do not create static libraries (#556052)S��LWS�Tomas Mraz <tmraz@redhat.com> 2.8.5-1J��- upgrade to a new upstream versionS��KWS�Tomas Mraz <tmraz@redhat.com> 2.8.4-1J� �- upgrade to a new upstream versionS��JWS�Tomas Mraz <tmraz@redhat.com> 2.8.3-1J�Q�- upgrade to a new upstream version���I���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2Ji�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_RebuildS��HWS�Tomas Mraz <tmraz@redhat.com> 2.8.1-1J/�@- upgrade to a new upstream versionS��GWS�Tomas Mraz <tmraz@redhat.com> 2.8.0-1J&e�- upgrade to a new upstream versiond��FWu�Tomas Mraz <tmraz@redhat.com> 2.6.6-1I��- upgrade to a new upstream version - security fixes !Q �9�^ � � a � I � � � w��(�Y�M�A�?� �.�Q i��og�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3T+�- added dependency on libtasn1 3.8 (#1110696)l�� om�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2T�A- disabled padlock CPU support in FIPS140-2 mode^�� oQ�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1T�@- updated to latest stable release��� u��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2T ��- updated with latest bug fixes for 3.3.x branch - delete bundled filesn�� sm�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1TT@- updated with latest bug fixes for 3.3.x branch�,�� o�k�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1S�0�- new upstream release (#1110696) - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)� ��s�G�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1S�@- updated with latest bug fixes for 3.3.x branch - utilize the p11-kit trust store (#1110750)]��oO�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2S�- correct path of fipscheck linkso��os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1Sϣ�- rebased to 3.3.6 and enabled fips mode (#1110696)���u�5�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9S��- fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)_��uM�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8S ��- fixes CVE-2014-0092 (#1071815)T��u7�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7R�@- fixes CVE-2014-1959M��_?�Daniel Mach <dmach@redhat.com> - 3.1.18-6R�U�- Mass rebuild 2014-01-24{��q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5R�&�- Fixed issue with gnutls.info not being available (#1053487)L�� _=�Tomáš Mráz <tmraz@redhat.com> 3.1.18-4R�&�- build the crywrap toolo��um�Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3R�T�- fixes crash in gnutls_global_deinit (#1047037)M��~_?�Daniel Mach <dmach@redhat.com> - 3.1.18-2R�k�- Mass rebuild 2013-12-27���}q� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1R�%�- new upstream release (#1040886) - Use the correct root key for unbound���|_�%�Tomáš Mráz <tmraz@redhat.com> 3.1.16-1Rx�- new upstream release - fixes CVE-2013-4466 off-by-one in dane_query_tlsa()� ��{_�7�Tomáš Mráz <tmraz@redhat.com> 3.1.15-1Ro�@- new upstream release - fixes CVE-2013-4466 buffer overflow in handling DANE entriesJ��z_9�Tomáš Mráz <tmraz@redhat.com> 3.1.13-1Q��@- new upstream releasek��y_{�Tomáš Mráz <tmraz@redhat.com> 3.1.11-1Q��- new upstream release - enable ECC NIST Suite B curvesv��xY��Tomas Mraz <tmraz@redhat.com> 3.1.10-1QP<@- new upstream release - license of the library is back to LGPLv2.1+F��wW9�Tomas Mraz <tmraz@redhat.com> 3.1.9-1QC @- new upstream releaseP��vWM�Tomas Mraz <tmraz@redhat.com> 3.1.8-3Q8�@- drop the temporary old library]��uWg�Tomas Mraz <tmraz@redhat.com> 3.1.8-2Q,��- don't send ECC algos as supported (#913797)F��tW9�Tomas Mraz <tmraz@redhat.com> 3.1.8-1Q& @- new upstream version�#��sW�q�Tomas Mraz <tmraz@redhat.com> 3.1.7-1QE�- new upstream version, requires rebuild of dependencies - this release temporarily includes old compatibility .so�%��r[�q�Tomas Mraz <tmraz@redhat.com> 2.12.22-2Q�@- rebuilt with new libtasn1 - make guile bindings optional - breaks i686 build and there is no dependent packageH��q[9�Tomas Mraz <tmraz@redhat.com> 2.12.22-1P� @- new upstream version� ��p[�;�Tomas Mraz <tmraz@redhat.com> 2.12.21-2P���- use RSA bit sizes supported by libgcrypt in FIPS mode for security levels (#879643)H��o[9�Tomas Mraz <tmraz@redhat.com> 2.12.21-1P��@- new upstream versionw��n[��Tomas Mraz <tmraz@redhat.com> 2.12.20-4P�d@- negotiate only FIPS approved algorithms in the FIPS mode (#871826) � / � 9 � 5 u � 3 ���[� �/��q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9Y(�- Address crash in OCSP status request extension, by eliminating the unneeded parsing (CVE-2017-7507, #1455828)���q�1�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7Y ��- Address interoperability issue with 3.5.x (#1388932) - Reject CAs which are both trusted and blacklisted in trust module (#1375303) - Added new functions to set issuer and subject ID in certificates (#1378373) - Reject connections with less than 1024-bit DH parameters (#1335931) - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748) - Mention limitations of certtool in manpage (#1375463) - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642) - Do not link directly to trousers but instead use dlopen (#1379739) - Fix incorrect OCSP validation (#1377569) - Added support for pin-value in PKCS#11 URIs (#1379283) - Added the --id option to p11tool (#1399232) - Improved sanity checks in RSA key generation (#1444780) - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337, CVE-2017-7869���q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1W��- Addressed issue with DSA public keys smaller than 2^1024 (#1238279) - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365) - When writing certificates to smart cards write the CKA_ISSUER and CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179) - Use the shared system certificate store (#1110750) - Address MD5 transcript collision attacks in TLS key exchange (#1289888, CVE-2015-7575) - Allow hashing data over 2^32 bytes (#1306953) - Ensure written PKCS#11 public keys are not marked as private (#1339453) - Ensure secure_getenv() is called on all uses of environment variables (#1344591). - Fix issues related to PKCS #11 private key listing on certain HSMs (#1351389)�@��q��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13Uq�@- Corrected reseed and respect of max_number_of_bits_per_request in FIPS140-2 mode. Also enhanced the initial tests. (#1228199)r��qw�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12T�|�- corrected fix of handshake buffer resets (#1153106)�/��q�o�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11T��@- Applied fix for urandom FD in FIPS140 mode (#1165047) - Applied fix for FIPS140-2 related regression (#1110696)� ��q�#�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10T}��- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)�;��o� �Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9Tk4�- Amended fix for FIPS enforcement issue (#1163848) - Fixed issue with applications that close all file descriptors (#1165047)���o�=�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8Td�@- Applied fix for FIPS enforcement issue when only /etc/system-fips existed (#1163848)f��oa�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7T\�@- Applied fix for CVE-2014-8564 (#1161473)o��os�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6TP�- when generating test DH keys, enforce the q_bits.��o��Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5TFJ�- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)�L��o�+�Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4T?�@- reverted change to use the p11-kit certificate storage (#1110750) - added functions to test DH/ECDH in FIPS-140-2 mode and fixed RSA key generation (#1110696) - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7 - fixed SHA224 in SSSE3 optimized code - fixed issue with handshake buffer resets (#1153106) - fixed issue in RSA key generation with specific seeds in FIPS140-2 mode 6 | ��1��le�o�~f� � 6 g��-w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��,y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��+� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���*� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���)�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��(wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��'w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���&w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��%yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���$y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��#w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��"y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��!� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�)�� ��O�Dmitriy Popov <dpopov@cloudlinux.com> 3.3.29-9.tuxcare.els1e��- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.|�� i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-9\b�@- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)��� i��Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8[Q�- Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record padding for lucky13 attack (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707) - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack (CVE-2018-10846, #1589708) - Address p11tool issue in object deletion in batch mode (#1375307) - Backport PKCS#11 tests from master branch. Some tests were disabled due to unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key generation without login, and certificates do not inherit ID from the private key) - p11tool explicitly marks certificates and public keys as NOT private objects and private keys as private objects - Enlarge buffer size to support resumption with large keys (#1542461) - Legacy HMAC-SHA384 cipher suites were disabled by default - Added DSA key generation to p11tool (#1464896) - Address session renegotiation issue using client certificate (#1434091) - Address issue when importing private keys into Atos HSM (#1460125) � d�n � } e � Y � c � rZ�~���S � �.��A� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���@� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���?��u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��>��_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��=��q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��<�9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��;�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���:�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��9wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��8w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���7w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��6yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���5y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��4�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���3�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��2wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��1w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���0w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��/yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���.y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 ` �{ � � | o � (�?�8�+��]�t�m � ` ~��]w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���\w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��[yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Zy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Yw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��Xy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��W� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���V� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���U�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Twc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Sw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Rw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��QyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Py�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Ow[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��Ny�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��M� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���L� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���K� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��J�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���I�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Hwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Gw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Fw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��EyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Dy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Cw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��By�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860 9 �y m w � � n � ���g�6�/ � 9 ���rw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��qyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���py�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��ow[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��ny�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��m� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���l� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���k��u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��j��_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��i��q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��h�9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��g�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���f�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��ewc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��dw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���cw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��byY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���ay�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��`�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���_�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��^wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460 H ~ � � � V � % � � (�7 ��Z�S�]�lT � H ��� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l�� �A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch��� �� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk�� wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�� w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298����� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk�� wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���~w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��}yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���|y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��{w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��zy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��y� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���x� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���w� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��v�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���u�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��twc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��sw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 S � � � % [���G�^�W�J� � S l��"�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���!�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk�� wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�� w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460��� w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�����u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<����_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E����q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh���9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl���A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733 � c� � 3 � , � � � Q�h�a�T��]�V�I � k��=wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��<w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���;w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��:yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���9y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��8�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���7�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��6wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��5w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���4w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��3yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���2y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��1w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��0y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��/� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���.� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���-�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��,wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��+w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���*w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��)yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���(y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��'w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��&y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��%� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���$� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���#� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 V �x B �u�.�E�>�1��:� V �.��Q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���P� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���O� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��N�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���M�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Lwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Kw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Jw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��IyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Hy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Gw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��Fy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��E� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���D� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���C��u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��B��_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��A��q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��@�9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��?�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���>�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver � �{ � � | � 5 � L�E�8��A�:�-��6 � h��l�9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��k�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���j�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��iwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��hw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���gw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��fyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���ey�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��d�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���c�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��bwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��aw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���`w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��_yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���^y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��]w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��\y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��[� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���Z� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���Y�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Xwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Ww��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Vw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��UyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Ty�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Sw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��Ry�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860 Z 6 u i � "�9�2�%��.��J�a � Z g��yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��~y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��}� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���|� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���{� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��z�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���y�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��xwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��ww��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���vw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��uyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���ty�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��sw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��ry�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���p� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���o��u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��n��_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��m��q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB write 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�0 � 809fb6de50adc428c30086fd62c04baf769fdfcbac0ca1e71fe1713c37e7645aD�/ � 1312e4ce82f2e6480f099c0360a5469c9ca7b04a70bb345b3fbee891f4638781D�. � 870fed48411ee57446d42ae5adbc085515b052af2af9df132680598d5915ab2aD�- � b46feb80f35e53126fbe9129bdd48aabe723fc9626cf000b2bdb451731b92a7bD�, � c94b26bdd56a7851afc54eb8e9780e20abfb07aabb383d7c949f5acc70f40076D�+ � 240ce416f0603f8e070f0b34e9a46ccc1ccd77f4351c21f621ee64c2294e1a21D�* � 91d7f962f5771a99e0c9bb34a85f8892c7626f4b12384c464568f32d3ce30791D�) � e37ac411ac510789c5e441e5676e08193974c19ebaa9e36e37cfa49d3190cdfeD�( � 466c8f2b8dbabe7714eee330eb5bb0636a3f0756a909e4b66079019bcb215f89D�' � e0ddb3eb6feb7f396b78992a3341af3f0ea66b65343a0a5dcdda14872917e8d8D�& � f59fda2b94beaa556dc9206bad91b47cd2a41d65350b26098b378445618c4183D�% � bc0ca6a028ed811e8dc163857782bd5b275eca27de1df10a02a419cce3b3efd4D�$ � cc016935577144145587f50a92e4c82f2f3833f6e04b5bf854ea6051776e28b0D�# � 6de049e9ee3b32dbc7a4ffa0910607875a6b365dce52f8ed6af5c767833220eaD�" � 817ec1382680bef91f8a451295583703b04841f9867be259af9f37e642979277D�! � cc6daf73983c6753432e49453349b7bef4512a1f852c60989b383ce8681ec0b0D� � 44f7174e33ad124134ae0e42ad2ab8167f4df1f90d83f2ae71909fdae7a7f1e7D� � 5f4032175927765b7a928a908310b4c219316c4a09024076ea68cd8fbfb2945eD� � fa425078b1643b37210e3e00de791c6545c982b490fffd29e7392c8af4bf27fbD� � ce82fceb77c9eb7df36fa3fd4fccbf91aad8ee1a44883ec32ea84fe0811805eeD� � e4e2bd29af37c9f1e353b9edb81065570807ce8e763e7b1a041e065827f0367cD� � 88329cb9eb346be6d398df07e280e31bb05e56fb811924cb0e2c08afec73740fD� � 94b55c6c0834d7b44cdab6ce6f14db106d4a11626f35a58a8d5d083f6b591a96D� � ea233dec970276927b90976451019572974390f7eab160da867ca1f7fae77b7eD� � 6549d428d213de14f2630faefd8ef4f57e9848b1307e19a9d2f6e1c6e2c5d4a4D� � c93a1a41b9b7d5a3720aa6b45475fe4e572245708bb2f279988ee975471c59c1D� � 33e82762c5e1e803a6b3399ecab0fc1342a6be65d7be379ad61936e3210e50d5D� � f920e3d5bf434f3e231930eb0614be2bbeb5512a88a5fbaedebdb657c03ab736D� � 850c0f75e5afdee787ace6e241f37f4dcb5a7ca7ff0616a0cecb313cb20b464aD� � 2b1f98b8b5c851993980c07f18ca7d97419b22fdab9c616a135b3f8db1810ac4D� � 827990b467aae63c38d0b3934c3d6cf3a237e1c7866a20cd8dd5b370acde16c0D� � c8471d4a20e445652272ff583a046d64b628c16944e9759559673756ae02bdb7D� � bbd972e0ce809ff4657024d32dc7f2a86dc48a11eefb233184a320dc6827e230D� � cc71f54abb31b3c41d5b071c415346dbffa5d0b2dec021ab4231dbe68a7bcddbD� � 059ac3d51bcdb282fcfea1772f69c78ac926897b538c18c747c67358032996bfD� � 898f391d896a3fab47de5b23ac352bfc0d26f60d8a43c18593db422ed6bccf5dD� � c7e6e8211fb541f2fc807fa3d0c0ac60e8caed283c16afeaa14a3a75084440c7D� � ed8c58ae36804d18f4a743484473c54934b486728bf56b5143ce64200425e89fD� � a72966653466884358bf55e09f2ec8d6b0e55023516501b982e0125de614d9bdD� � f823f79eba1c9e68da8e308911f1022caec4c807f4a7047fab1617e65e95796aD� � 09fbdfb24a5b5ac399d7bbccf6fa0ff774db699870d4090da3cc7adbd1040a57D� � 543d0e1eb6a919496494d773cbdcd8301171f7b5acb559a7bb0ddb8103518896D� � af4122242c995cd086e5953cf73e19e6131592b2df0802288cae99a064145927D� � c71863429a827700607ce7bc950cc5a68c2b2f4f88cbdc83afd9a267b92e0d3aD� � 60aee0fe3c832396ea805d83abef626b5209370823404efcf8cd5dba9df32a6dD� � f750a3fbfa92ed9f1fd9d7cb0c02cb9586cedd4c8aeecbd31ed31011d023470fD� � 60649621da57d358b2bc8b26ed284880c0759bbfdec6a103731c721476093bf0D� � b72171c084a5150c91061a6fa7802467d56a62d95dc3823124d1d56337a5296dD� � 257a28a7963ee69b969c8f407e533df5371712e1ba0f2d1f8092fd4101b4e51bD� � 2a5991f0cad3c38ce20522bb90b31b3d00143f53f9b87bd9b0a55e1dd9c8ef81D�~ � f0dd082754a7f8db8ac1f9cc71debc97f7c523a84e64b38ef8bc196ec2967b92D�} � 246ee2e88c08cf655a71e7ee0cbf3c062fb8ce4e0e948788471a0e614b2ca579D�| � 679856d7b8802e9d74176be20aec95130bd312f21d23261df50d901f300bd5e7D�{ � 3af31e1dd9aee93f3d0069aae9ba1a79dc6dec5fc0dd2be97490eb7b403f2600D�z � aa96de2a02f175d3cce3f380464029d1d9322175e48053b4f961b82d2257750bD�y � 35d12f83a601cf933a1988ab445ed075f6c9195bc88037d46e39b608a2799ef5 � u�� l � % � < � 5 � (��1�*� ��&� � �E����q�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh���9�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl���A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l���A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�� w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460��� w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298����� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460 � ? 3 � � n g�q��h�[��+�$� � k��0wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��/w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���.w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��-yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���,y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��+w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��*y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��)� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���(� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���'� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��&�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���%�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��$wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��#w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���"w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��!yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�����u�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<����_�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload � �T � # � � & � 5 ���*�6l � �<��F��_ Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��E��q Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��D�9 Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��C�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���B�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Awc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��@w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���?w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��>yY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���=y�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��<�A�Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���;�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��:wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��9w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���8w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��7yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���6y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��5w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��4y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��3� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���2� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���1�� �Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver � � ` � / � ( � 2 � A)� ��W�P�Z�iQ � ���^� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���]�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��\wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��[w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Zw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��YyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Xy�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Ww[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��VyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��U� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���T� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���S� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��R�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���Q�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��PwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Ow�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Nw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��MyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Ly�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Kw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��JyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��I� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���H� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���G��u Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write K M�d � ] � P � � Y � R�E��N�W K ���s��uPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��r��_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��q��qPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��p�9Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��o�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���n�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��mwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��lw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���kw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��jyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���iy�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��h�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���g�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��fwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��ew�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���dw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��cyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���by�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��aw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��`yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��_� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 � l�; � 4 � > � M 5 � (��c�\�f�u]��- � ���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�� w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�� yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� � �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��~�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���}�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��|wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��{w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���zw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���xy�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��ww[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��vyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��u� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���t� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 S � � � � � � } ��P���< � S g��#w[ Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��"y Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��!� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� � � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� ��uPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<�� ��_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E�� ��qPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh�� �9Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl���APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l���APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733 � d�n � } e � X � � (�!����F�]�V�I � k��>wc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��=w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���<w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��;yY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���:y�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��9w[ Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��8y Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��7� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���6� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���5�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��4wc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��3w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���2w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��1yY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���0y�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��/w[ Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��.y Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��-� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���,� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���+� �% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��*�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���)�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��(wc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��'w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���&w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��%yY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���$y�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 � �x � q � d � � m 7vj�#�:�3 � ���Rw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��QyY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Py�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Ow[ Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��Ny Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��M� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���L� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���K��u Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��J��_ Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��I��q Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��H�9 Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��G�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���F�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Ewc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Dw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Cw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��ByY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Ay�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��@�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���?�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver H ~ � � � V � % � � (�7 ��Z�S�]�lT � H ���my�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��l�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���k�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��jwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��iw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���hw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��gyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���fy�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��ew[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��dyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��c� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���b� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���a�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��`wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��_w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���^w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��]yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���\y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��[w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��ZyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��Y� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���X� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���W� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��V�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���U�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��Twc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Sw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 S � � � % [���G�^�W�J� � S l���APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk�� wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���~w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��}yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���|y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��{w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��zyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��y� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���x� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���w��uPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��v��_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��u��qPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��t�9Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��s�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���r�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��qwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��pw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���ow�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��nyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733 � c� � 3 � , � � � Q�h�a�T��]�V�I � k�� wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�� w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l���APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk�� wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�� w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460��� w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�� yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 V �x B �u�.�E�>�1��:� V �.��1� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���0� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���/� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��.�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���-�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��,wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��+w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���*w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��)yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���(y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��'w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��&yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��%� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���$� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���#��uPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��"��_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��!��qPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh�� �9Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl�� �APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch��� �� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver � �{ � � | � 5 � L�E�8��A�:�-��6 � h��L�9Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��K�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���J�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��IwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Hw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Gw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��FyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Ey�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��D�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���C�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��BwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Aw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���@w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��?yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���>y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��=w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��<yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��;� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���:� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���9�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��8wcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��7w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���6w�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��5yYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���4y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��3w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��2yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860 Z 6 u i � "�9�2�%��.��J�a � Z g��ayYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���`y�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��_w[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��^yRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��]� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���\� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���[� �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240l��Z�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���Y�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��XwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��Ww�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���Vw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��UyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���Ty�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��Sw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��RyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��Q� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���P� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���O��uPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��N��_Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload�E��M��qPavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB write � u�� l � % � < � 5 � (��1�*� ��&� � �E��y��q Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els4g��@- CVE-2024-45774: reader/jpeg: Heap OOB write during JPEG parsing - CVE-2024-45775: commands/extcmd: Missing check for failed allocation - CVE-2024-45776: grub-core/gettext: Integer overflow leads to heap OOB write and read - CVE-2024-45777: grub-core/gettext: Integer overflow leads to heap OOB write - CVE-2024-45780: fs/tar: Integer overflow causes Heap OOB writeh��x�9 Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els3gř�- Bump up SBAT versionl��w�A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���v�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��uwc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��tw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���sw� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��ryY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���qy�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733l��p�APavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch���o�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��nwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��mw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���lw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��kyYRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733���jy�7Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��iw[Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��hyRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��g� �QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���f� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���e�� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��dwcNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��cw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���bw�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460 � ? 3 � � n g�q��h�_�-��b�0 � ����� &Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path����� %Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path��� �� $Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path��� �� #Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path��� �� "Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path��� �� !Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path��� �� Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path����� Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search path����� Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.22.30-8.tuxcare.els1f�@- CVE-2024-6655: fix loading library from unstrusted search pathl���A Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els2f��@- Update version and epoch����� Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els1fB �- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driverk��wc Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~��w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460���w� Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g��yY Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��� y�7 Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g��w[ Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z��~y Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.��}� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148���|� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298���{��u Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els6g�<�- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_configfile() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write�<��z��_ Pavel Kopylov <pkopylov@cloudlinux.com> - 2.02-087.el7.14.tuxcare.els5g�<�- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2024-45783: fs/hfs+: refcount can be decremented twice - CVE-2025-0622: normal: Remove variables hooks on module unload - CVE-2025-0622: gettext: Remove variables hooks on module unload % | �9��2 � 2 � k S � � ' � ���%�X�D�z)�R�x���2 � | M��4_?*Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a��3sS*Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea��2sS*Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��1kU*Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog�-��0��C)Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��/qW)Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��.qY)Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��-cY)Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��,s})Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148���+s�)Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM��*_?)Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24M��)_?)Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a��(sS)Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea��'sS)Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��&kU)Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog�-��%��C(Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��$qW(Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��#qY(Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��"cY(Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��!s}(Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148��� s�(Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM�� _?(Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24M�� _?(Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a�� sS(Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea�� sS(Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��kU(Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog�-����C'Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��qW'Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��qY'Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��cY'Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��s}'Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148���s�'Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM��_?'Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24M��_?'Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a��sS'Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea��sS'Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��kU'Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog � �)�O � � � n � S | � ;�#�\��U�U��(v � � E��T]1-Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��S]�k-Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��RsW-Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)�-��Q��C,Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��PqW,Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��OqY,Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��NcY,Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��Ms},Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148���Ls�,Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM��K_?,Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24M��J_?,Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a��IsS,Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea��HsS,Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��GkU,Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog�-��F��C+Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��EqW+Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��DqY+Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��CcY+Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��Bs}+Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148���As�+Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM��@_?+Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24M��?_?+Daniel Mach <dmach@redhat.com> - 0.9.20-2R�k�- Mass rebuild 2013-12-27a��>sS+Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-1R �@- Update to 0.9.20 upstream releasea��=sS+Parag Nemade <pnemade AT redhat DOT com> - 0.9.19-1Q�@- Update to 0.9.19 upstream release^��<kU+Matthias Clasen <mclasen@redhat.com> - 0.9.18-3Q�@@- Don't ship a (humongous) ChangeLog�-��;��C*Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1.7.5-2.tuxcare.els1f�w�- CVE-2023-25193: optimize looking back for base glyphs in hb-ot-layout-gsubgpos-private.hhb��:qW*Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-2[{A- Simply rebuild - Resolves: #1576536c��9qY*Parag Nemade <pnemade AT redhat DOT com> - 1.7.5-1[{@- Update to 1.7.5 - Resolves: #1576536\��8cY*Kalev Lember <klember@redhat.com> - 1.3.2-1X�@- Update to 1.3.2 - Resolves: #1386994v��7s}*Parag Nemade <pnemade AT redhat DOT com> - 0.9.36-1U?v@- Update to 0.9.36 upstream release - Resolves: #1201148���6s�*Parag Nemade <pnemade AT redhat DOT com> - 0.9.20-4S��- Resolves:rh#998812 - gedit segfaults when loading a certain fileM��5_?*Daniel Mach <dmach@redhat.com> - 0.9.20-3R�U�- Mass rebuild 2014-01-24 q �U�s# � k | � � Q � h � � ��.�E��P��`q �j��s[�{-Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��r]G-Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��q]1-Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��p_C-Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��oa[-Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��n]� -Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���m��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��lac-Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��ka�!-Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���ji�K-Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��i]1-Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��h]w-Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���ga�+-Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���fa�E-Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��eas-Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���da�)-Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��c]�-Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��b_W-Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��a_� -Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��`_m-Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��__ -Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��^];-Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���]��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��\]�y-Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��[]q-Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��Z]=-Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��Y]?-Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��X]� -Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��W]w-Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��V]1-Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��U]c-Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z now ! � � � � D � & � � � � ; � S�m �8��3��H�=�Y � � c��[o-Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��_w-Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��[� -Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��[{-Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��]}-Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)�����-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��]q-Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[�� ]]-Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy�� ]�-Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!�� ]�g-Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez�� ]�-Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ�� ]I-Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��]�#-Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��]{-Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��]o-Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��]q-Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��]g-Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��]y-Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��[�-Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��[� -Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd�� [q-Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��[=-Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��~[]-Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��}[�-Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��|_ -Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��{[5-Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���z[�C-Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��y_/-Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��x[%-Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��w[G-Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��v[o-Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��u[�}-Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��t[�A-Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir l v` � � * � } ~ . � 5 � ;�g���Q��+��@�_ � l {��4_�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��3_�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��2_�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��1_a-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��0_�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��/_W-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��.[�-Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��-a�i-Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��,]o-Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��+]o-Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��*[M-Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��)_o-Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��(_�{-Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��'_�-Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��&_� -Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��%_k-Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��$[{-Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��#[�#-Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��"]� -Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���!��-Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY�� ]Y-Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL�� ]?-Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� �� ]�_-Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y�� ]Y-Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<�� ] -Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��]y-Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��_{-Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��[g-Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��[i-Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��[� -Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��_]-Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���[�1-Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks �T��V � \ � d � N x�t����4�� �P��La�A-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��Ka�K-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��Jay-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��Iao-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��Ha�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��Ga� -Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��Fa}-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��Ea-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��Daq-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���Ca�)-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��Ba� -Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��Aa� -Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��@a�C-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��?a�]-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��>a�}-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��=]q-Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��<]�9-Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��;_?-Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��:]�m-Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��9] -Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��8]U-Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��7]e-Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��6]?-Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��5[Y-Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360) � eYx�� l��Ua{-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��Ta{-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��Sa� -Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��Ra�Y-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��Qa�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��Pa�-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��Oa�7-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��Na� -Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���Ma�G-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430) � 2 � 1 � O�[� ��E���R � �2��gm�y-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���fm�=-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��em�_-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��dm�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��cm�q-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��bm�_-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���am�;-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���`m�5-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��_m�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��^m�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��]m�]-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��\]�-Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���[m�;-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���Zm�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��Y]U-Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��X]� -Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��W]� -Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��Va�3-Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797) g V� � ~ � A � 9�}U��f�L�[ � g s��m}-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��~]�-Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��}m�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��|m{-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��{m�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���zm�5-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���ym�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��xm�w-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��wm�q-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��vm�c-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��um�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���tm� -Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��sm�+-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��rm�O-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��qm�?-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���pm�9-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���om�9-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��nm-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��mm�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���lm�9-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��km�k-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��jm�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��im� -Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��hm�_-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize x h�\ � * � �0�+_�q�* x �-��q�k-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���q�/-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��q�m-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�� k�=-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��� k�9-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�� k�%-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��� k�I-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�� ]m-Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���k�9-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��k�?-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��]�-Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���m�7-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��m�--Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��m�M-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��m�)-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��m�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)��� m�;-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close � � � ; � � Y1��=�[ �Sd�z9�P� � � h��*as.Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���)a�).Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��(]�.Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��'_W.Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��&_� .Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��%_m.Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��$_ .Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��#];.Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���"��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��!]�y.Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte�� ]q.Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK�� ]=.Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L�� ]?.Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr�� ]� .Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h�� ]w.Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��]1.Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��]c.Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��]1.Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��]�k.Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��sW.Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)�L��� � -Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�U-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��q�c-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��q�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��q�7-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session o i�s* � � � [ ��}�f����j�X �"�< � o e��J]q.Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��I]g.Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��H]y.Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��G[�.Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��F[� .Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��E[q.Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��D[=.Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��C[].Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��B[�.Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��A_ .Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��@[5.Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���?[�C.Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��>_/.Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��=[%.Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��<[G.Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��;[o.Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��:[�}.Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��9[�A.Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��8[�{.Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��7]G.Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��6]1.Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��5_C.Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��4a[.Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��3]� .Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���2��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��1ac.Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��0a�!.Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���/i�K.Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��.]1.Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��-]w.Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���,a�+.Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���+a�E.Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names ! � �*f � � p � � 0 � L�[�E�~�bc�� �L � }��k_� .Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��j_k.Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��i[{.Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��h[�#.Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��g]� .Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���f��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��e]Y.Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��d]?.Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��c]�_.Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��b]Y.Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��a] .Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��`]y.Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��__{.Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��^[g.Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��][i.Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��\[� .Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��[_].Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���Z[�1.Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��Y[o.Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��X_w.Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��W[� .Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��V[{.Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��U]}.Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���T��.Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��S]q.Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��R]].Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��Q]�.Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��P]�g.Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��O]�.Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��N]I.Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��M]�#.Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��L]{.Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��K]o.Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599) q � � k � E � * � Z � y �*�w �3�S�7��| � q ���a�).Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��a� .Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��a� .Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��a�C.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��a�].Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��a�}.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��]q.Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��]�9.Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M�� _?.Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��]�m.Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��~] .Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��}]U.Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��|]e.Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��{]?.Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��z[Y.Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��y_�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��x_�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��w_�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��v_a.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��u_�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��t_W.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��s[�.Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��ra�i.Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��q]o.Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��p]o.Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��o[M.Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��n_o.Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��m_�{.Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��l_�.Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured. � �#�/ � I � +�@B� � �\��a�Y.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��a�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��a�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��a�7.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��a� .Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���a�G.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��a�A.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��a�K.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��ay.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��ao.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x�� a�.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125�� a� .Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m�� a}.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n�� a.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g�� aq.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006) � } � � O�s�T��|�$��/r � �e��*m�_.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��)m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��(m�q.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��'m�_.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���&m�;.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���%m�5.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��$m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��#m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��"m�].Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��!]�.Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)��� m�;.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws��� m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W�� ]U.Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}�� ]� .Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|�� ]� .Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��a�3.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��a{.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��a{.Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��a� .Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503) � g� = u � . i � Z��G�-�R�� � � r��Am{.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��@m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���?m�5.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���>m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��=m�w.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��<m�q.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��;m�c.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��:m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���9m� .Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��8m�+.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��7m�O.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��6m�?.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���5m�9.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���4m�9.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��3m.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��2m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���1m�9.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��0m�k.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��/m�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��.m� .Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��-m�_.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��,m�y.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���+m�=.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once O �� � | � L � % � W�Z��Z O �.��Sq�m.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��Rk�=.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���Qk�9.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��Pk�%.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���Ok�I.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��N]m.Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���Mk�9.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��Lk�?.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��K]�.Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���Jm�7.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��Im�-.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��Hm�M.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��Gm�).Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��Fm�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���Em�;.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��Dm}.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��C]�.Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��Bm�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invoked l l� b � � N � z��d�p�>��� � � l =��j_ /Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��i];/Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���h��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��g]�y/Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��f]q/Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��e]=/Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��d]?/Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��c]� /Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��b]w/Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��a]1/Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��`]c/Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��_]1/Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��^]�k/Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��]sW/Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)���\� �w.Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��[� � .Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Zq�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Yq�U.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Xq�c.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Wq�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Vq�7.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Uq�k.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���Tq�/.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix [ ��F � Q � 0 � { � X � X_��c � �d"�F�� � [ J�� [=/Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z�� []/Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��[�/Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��_ /Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��[5/Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���[�C/Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��_//Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��[%/Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��[G/Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��[o/Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+�� [�}/Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��[�A/Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��~[�{/Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��}]G/Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��|]1/Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��{_C/Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��za[/Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��y]� /Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���x��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��wac/Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��va�!/Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���ui�K/Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��t]1/Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��s]w/Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���ra�+/Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���qa�E/Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��pas/Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���oa�)/Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��n]�/Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��m_W/Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��l_� /Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��k_m/Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches " ��2 � e � � � v � R � v q� �J�`�F�t�j�x ���,��/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��+]Y/Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��*]?/Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��)]�_/Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��(]Y/Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��'] /Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��&]y/Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��%_{/Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��$[g/Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��#[i/Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��"[� /Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��!_]/Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)��� [�1/Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc�� [o/Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni�� _w/Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters�� [� /Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i�� [{/Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��]}/Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)�����/Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��]q/Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��]]/Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��]�/Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��]�g/Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��]�/Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��]I/Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��]�#/Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��]{/Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��]o/Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��]q/Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��]g/Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��]y/Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu�� [�/Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|�� [� /Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd�� [q/Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599) � ��2 � v � � ^ � M�~ �*�7��(������ � �^��Ja�]/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��Ia�}/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��H]q/Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��G]�9/Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��F_?/Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��E]�m/Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��D] /Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��C]U/Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��B]e/Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��A]?/Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��@[Y/Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��?_�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��>_�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��=_�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��<_a/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��;_�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��:_W/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��9[�/Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��8a�i/Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��7]o/Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��6]o/Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��5[M/Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��4_o/Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��3_�{/Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��2_�/Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��1_� /Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��0_k/Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��/[{/Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��.[�#/Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��-]� /Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500) � *�& � 2 � O � P � w ���- � �K��Za�7/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��Ya� /Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���Xa�G/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��Wa�A/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��Va�K/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��Uay/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��Tao/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��Sa�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��Ra� /Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��Qa}/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��Pa/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��Oaq/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���Na�)/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��Ma� /Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��La� /Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��Ka�C/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536) E D c � p 2�1�O�[� � � E �%��mm�_/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���lm�;/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���km�5/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��jm�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��im�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��hm�]/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��g]�/Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���fm�;/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���em�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��d]U/Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��c]� /Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��b]� /Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��aa�3/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��`a{/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��_a{/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��^a� /Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��]a�Y/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��\a�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��[a�/Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924) B M� � V � � k�� i��]�W� � B �1��m�w/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��m�q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��m�c/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx�� m�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���m� /Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��~m�+/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��}m�O/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��|m�?/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���{m�9/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���zm�9/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��ym/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��xm�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���wm�9/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��vm�k/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��um�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��tm� /Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��sm�_/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��rm�y/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���qm�=/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��pm�_/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��om�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��nm�q/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody D z�` � o � { � f � 6 � �A�D� � D ���k�9/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��k�%/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���k�I/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��]m/Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���k�9/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��k�?/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��]�/Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���m�7/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��m�-/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��m�M/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� �� m�)/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery�� m�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)��� m�;/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes�� m}/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy�� ]�/Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��m�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��m{/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��m�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���m�5/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���m�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output � � � a � W � � C�o�4����) � �"��)q�U0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��(q�c0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��'q�0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��&q�70Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��%q�k0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���$q�/0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�/��#��O/Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���"� �w/Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��!� � /Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication�� q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�� q�U/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�� q�c/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�� q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�� q�7/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��q�k/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���q�//Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��q�m/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��k�=/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues u }, � � ����+��)u �/��7��O1Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���6� �w1Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��5� � 1Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��4q�1Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��3q�U1Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��2q�c1Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��1q�1Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��0q�71Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��/q�k1Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content�J��.� � 0Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��-��O0Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���,� �w0Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��+� � 0Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��*q�0Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�h � 8a49153c461480cf55bbda858f76c639d82f551b4c9e5babec8f8ca633826c02D�g � 9dd772ffbb005866757598792717388a085288a4083a7874e1c58d1cbe2ea774D�f � 5e6d212185184be24cecf86c946e566d08c54bac3aafd5c44669080e9b46ea6cD�e � 8249c7a3cec20f4fc7f48faa1aa5a6de8c462a2ab84e68361befbae6dfb0f0e9D�d � 67ca4f592dea090b7d9c1ec77fc855a247c756e06296706e759c81ba59fd14c0D�c � 2f20a5eebbaff4569cca8084dfd9f27c2ad2ca5f1add6ac3b273a5d9db4ad38eD�b � 77f72940a00eee64df66dbf3b2e484deeb6b31f44e5573750fb932b7269e6a2eD�a � 5ba1593b58b70d5c5ab1d53dd2bff01711b1870ca62d14df25f6c36cb76ef5a1D�` � 88937e66ca2cc03e7319e5b843cd45bf312bee57d92dd3e953bf5595fdb16decD�_ � dba7c2091bdac96b2abb6fd90bdcad5bfa9580726ae059255afe20b14968c0bdD�^ � 3986a32feab59be802b261f80f118f15b84c1376f5b10d3052e9fe383ccef022D�] � 6323d482a046b32a6726a146d76496a32f6bc75048320c5afa5c91209df79687D�\ � 3c3d118822d3c059ace345d308f3945ecd8cf2d723492a252a9e39344cab1ce0D�[ � 2bc2437c9327ab0aea6b05d0f87dd83c55d273e37870918259b5a1ff6da38c91D�Z � 24dc9af28c7924812abf519248b43eaec9f0f029dd7f00e01d5a07b5cc9580c6D�Y � 80197e7824b424222f1019b69d5bf9700189d23e4385ed7f37694988e2f63ac3D�X � ca66f88252bcaffcd0342efab686d43e34ae2da0aabb8cdcb223712b683c919aD�W � f9e1048e5e2eaaf7c5ff4fc92b5872c888983557c9c85e66f48a4ddd1987f592D�V � 4eeb982a0880e099445e605041075973b839905bf3bad37778ad73ea48ec1447D�U � a59013a69cdc3aecab4940babbb482de45d92821201af1d13308cc3690bb4cd0D�T � c28ad540ac293ff5d18c39d154ac6b72670b75f9bffbfa5ae2fefd3662e1e553D�S � 972a45746c118820f9580a0dc2fa8350e754741f6ffbb9817ea1abb95482dd1bD�R � c87654dc8cb705e3a9f24a1ee77bc4239e2692859de73990e19a272f59bb093aD�Q � 48651c57adec44ce36e17432e3e5738bc6afac2e2d2fc9199ef217fd22deb521D�P � 0fc46b003e087f60e997772f257e07641c53b96b73381ce28fc93738ba804f0cD�O � 223cfda2ccb972d5630e7e9f32a3e55deb6bee7376cdb9894863b8ef3eee2b0eD�N � 2223c7f4454e34edf5d86e43a9b05da8914a3f0ce8e7ec048747ffb5139ce4deD�M � 11bec23f36a45ea26437c1042ae97c1aafb05eefeb7ac733ba2b4a628a295ea6D�L � 9876767cf61fc2d6b605b25f13c01473799f16a01ad6d1cd69961765fc3f7ab3D�K � 3b94e5275a7240d6b0ee700c8580610ad493c0e544959132f532f1f728347a0fD�J � 106bff921be37ab19844e420841fcc65c4030b2244003dbc8510e04226f6659cD�I � 09256a19853f54c45a758b812d3cb0c419067e018a55b30d30ee2c3d5ff3d831D�H � c180d771c4065da484d16b9d8da93bceb0f7717f8216f801b7f87ae452398831D�G � 5edb33c5c92cb889c27866cc95694b89618d2ae4b66d5529ab880844b2e65880D�F � 2aa58aa31454d5b60530522eb3e339cd93cb95a74be837e146cdf1509f2a0f6fD�E � d8131b32ed21266b832a3bb218f417101124481b377623475d43e7647926ad16D�D � 9b46055e5a4516de55a05d9e3944593172aac762349c27c6a79ff4abd2846780D�C � 4d80233c6fb9fb8ff9ec9be1cac6ff066ca65a67190f75f32a18047ac53ed025D�B � 0d70722f6d1fdcadc80f6169e588b80167e7d68c3ca0c56108dc513e75637a9aD�A � 502b64909c0c33ef0b8ab831cffba88a49927a1a9ef9cf28da5e61681e78ce2aD�@ � 645a1bc600149106c79f31cccbd408a1ca3a34e0c239454bb64de14d5fa429aeD�? � a169890c4598c8da4bf4e75f3d38c68fa72608132120acbf1c11a069e9ee7e99D�> � 23d70d183ab199f060f878671a194c4bbcf2b002fd4ffd243cb299b6d7c0249eD�= � ac1c0b3e8d902e366a9150a727ff70925010009733e9d72bb96caeb49b8d532eD�< � 8b0c8bea40562dab0ea6600a9da434fbb6f8ef449bc2b09ff5bc751ed650b060D�; � 1c9196bba5d2f3ef0cceab961a60fdbc5e505269cb1790cbe82303e6c507db5aD�: � b398a8d950c33a30e48cfb04af3f16649c43b0090398df6f8be819f6d85683fdD�9 � a27bcdee6e534c2e3d4a9d689bf70c10106788ef60841eed4cf2c7a00695942cD�8 � ab737e7f072894c9631da8d9d3d9878d250c5710ee18e54392eea0e6ab21f8bcD�7 � 2b6bb3ac663cff9c2fae8491e8cc779e5548a9d71c47704866200ed124a7065aD�6 � f1047c20519f0ddce4e6a1236355ca8bbfbbb69bb43b6b3bc00c6b3cdab7a4b2D�5 � cd6fbd0bdacaf27c96951d9b2ee020e40aa76141bae95cf3f645aeba7b6d54a1D�4 � b17a842900953d7ec2e5982b160fc149ffc6e6f66210f4fd1ea2fc68802bb9a2D�3 � 4fec53163dbdda346b75ec6aec34300ab7d6f4c6472e9ce3b0e9fa71fd79d3b2D�2 � fdb737448bce0d46aa8659b000293c1945dedfb27d2f2ee540c3e1230e2652f7D�1 � cf08ca63a37e4f86e3a0a5a9f177455317517c462ee1a7c488241013b4e04f39 � ? � ( z�P�x�u �m��C� �O2Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��B� � 2Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��A��O2Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���@� �w2Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��?� � 2Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��>q�2Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��=q�U2Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��<q�c2Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��;q�2Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��:q�72Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�m��9� �O1Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��8� � 1Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution a W � � C � o�4�s�9� � a ��Rq�4Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Qq�U4Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Pq�c4Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses� ��O� � 3Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��N� �=3Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��M� �O3Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��L� � 3Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��K��O3Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���J� �w3Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��I� � 3Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Hq�3Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Gq�U3Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Fq�c3Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Eq�3Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�$��D� �=2Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack K � ( t %� yZ���K �/��_��O5Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���^� �w5Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��]� � 5Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��\q�5Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��[q�U5Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxyt��Z�U4Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��Y� � 4Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��X� �=4Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��W� �O4Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��V� � 4Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��U��O4Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���T� �w4Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��S� � 4Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication E � ? � � ��:��#�]����# � E Y��v_W6Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��u_� 6Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��t_m6Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��s_ 6Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��r];6Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���q��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��p]�y6Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��o]q6Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��n]=6Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��m]?6Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��l]� 6Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��k]w6Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��j]16Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��i]c6Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��h]16Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��g]�k6Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��fsW6Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)w��e� Q5Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els9g���- CVE-2022-30522: fix possible DoSt��d�U5Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��c� � 5Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��b� �=5Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��a� �O5Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��`� � 5Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution � �� v � # � : � � E��Ufd��h �BM��9 � |��[� 6Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��[q6Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��[=6Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��[]6Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��[�6Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��_ 6Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��[56Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���[�C6Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE�� _/6Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>�� [%6Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO�� [G6Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc�� [o6Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+�� [�}6Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��[�A6Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��[�{6Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��]G6Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��]16Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��_C6Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��a[6Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��]� 6Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd�����6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`�� ac6Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��a�!6Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���~i�K6Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��}]16Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��|]w6Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���{a�+6Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���za�E6Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��yas6Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���xa�)6Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��w]�6Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default config " m ��M � w � ^ � : � ^ � Y�}�2�H�.�\��R�`g � m ~��7[�#6Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��6]� 6Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���5��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��4]Y6Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��3]?6Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��2]�_6Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��1]Y6Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��0] 6Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��/]y6Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��._{6Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��-[g6Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��,[i6Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��+[� 6Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��*_]6Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���)[�16Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��([o6Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��'_w6Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��&[� 6Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��%[{6Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��$]}6Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���#��6Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��"]q6Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��!]]6Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy�� ]�6Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!�� ]�g6Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez�� ]�6Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ�� ]I6Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?�� ]�#6Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��]{6Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��]o6Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��]q6Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��]g6Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��]y6Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��[�6Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support � �,� p � X � G � x �$�1��"������� � �Q��Ta�C6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��Sa�]6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��Ra�}6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��Q]q6Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��P]�96Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��O_?6Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��N]�m6Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��M] 6Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��L]U6Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��K]e6Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��J]?6Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��I[Y6Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��H_�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��G_�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��F_�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��E_a6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��D_�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��C_W6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��B[�6Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��Aa�i6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��@]o6Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��?]o6Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��>[M6Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��=_o6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��<_�{6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��;_�6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��:_� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��9_k6Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��8[{6Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438) � ~�s � % � & � M s ��� � �y��da�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��ca�76Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��ba� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���aa�G6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��`a�A6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��_a�K6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��^ay6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��]ao6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��\a�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��[a� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��Za}6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��Ya6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��Xaq6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���Wa�)6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��Va� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��Ua� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078) � Ba � n �0�/�M�Y���C � �.��wm�q6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��vm�_6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���um�;6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���tm�56Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��sm�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��rm�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��qm�]6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��p]�6Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���om�;6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���nm�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��m]U6Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��l]� 6Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��k]� 6Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��ja�36Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��ia{6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��ha{6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��ga� 6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��fa�Y6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��ea�6Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416) o CY � _ � � ��J� B�� ^� � o ��� m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1�� m�w6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.�� m�q6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'�� m�c6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx�� m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���m� 6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��m�+6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��m�O6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��m�?6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���m�96Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�96Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��m6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48��� m�96Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��m�k6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��~m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��}m� 6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��|m�_6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��{m�y6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���zm�=6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��ym�_6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��xm�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter � k�p � x i � ] � + � �1�,` � ��� k�96Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�� k�%6Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��� k�I6Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�� ]m6Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��� k�96Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��k�?6Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��]�6Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���m�76Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��m�-6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��m�M6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��m�)6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���m�;6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��m}6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��]�6Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��m{6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��m�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���m�56Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN w � � a � W � � C�o��5�� �k w ���6��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��5]�y7Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��4]q7Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��3]=7Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��2]?7Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��1]� 7Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��0]w7Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��/]17Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��.]c7Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��-]17Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��,]�k7Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��+sW7Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)�L��*� � 6Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��)q�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��(q�U6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��'q�c6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��&q�6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��%q�76Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��$q�k6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���#q�/6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��"q�m6Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��!k�=6Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues x �q �+ � . � + � 5 � N � e��p ���?�(��J�m, x �/��V[�7Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��U_ 7Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��T[57Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���S[�C7Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��R_/7Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��Q[%7Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��P[G7Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��O[o7Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��N[�}7Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��M[�A7Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��L[�{7Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��K]G7Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��J]17Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��I_C7Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��Ha[7Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��G]� 7Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���F��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��Eac7Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��Da�!7Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���Ci�K7Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��B]17Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��A]w7Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���@a�+7Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���?a�E7Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��>as7Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���=a�)7Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��<]�7Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��;_W7Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��:_� 7Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��9_m7Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��8_ 7Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��7];7Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn # o �T�l � � " � Q � � L � )�a�V�r����7�[� � o Y��y]Y7Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��x]?7Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��w]�_7Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��v]Y7Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��u] 7Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��t]y7Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��s_{7Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��r[g7Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��q[i7Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��p[� 7Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��o_]7Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���n[�17Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��m[o7Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��l_w7Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��k[� 7Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��j[{7Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��i]}7Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���h��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��g]q7Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��f]]7Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��e]�7Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��d]�g7Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��c]�7Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��b]I7Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��a]�#7Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��`]{7Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��_]o7Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��^]q7Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��]]g7Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��\]y7Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��[[�7Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��Z[� 7Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��Y[q7Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��X[=7Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��W[]7Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073) L d�j � � � � � * � Z�?�o ��?��1�H�h�L �.��a�}7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��]q7Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��]�97Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��_?7Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��]�m7Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��] 7Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��]U7Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��]e7Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��]?7Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��[Y7Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){�� _�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p�� _�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){�� _�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^�� _a7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o�� _�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��_W7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��[�7Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��a�i7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��]o7Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��]o7Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��[M7Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��_o7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��_�{7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6�� _�7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��_� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��~_k7Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��}[{7Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��|[�#7Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��{]� 7Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���z��7Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � � � E � : � ] � i � � :eM � ��'a� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���&a�G7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��%a�A7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��$a�K7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��#ay7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��"ao7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��!a�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125�� a� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m�� a}7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n�� a7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g�� aq7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)��� a�)7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��a� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��a� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��a�C7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��a�]7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608) 7 � � � � ��b���g� � � 7 ���9m�57Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��8m�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��7m�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��6m�]7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��5]�7Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���4m�;7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���3m�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��2]U7Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��1]� 7Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��0]� 7Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��/a�37Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��.a{7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��-a{7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��,a� 7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��+a�Y7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��*a�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��)a�7Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��(a�77Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015) i h� N d � j ��)��U�'M�� i �'��Om�c7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��Nm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���Mm� 7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��Lm�+7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��Km�O7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��Jm�?7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���Im�97Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���Hm�97Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��Gm7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��Fm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���Em�97Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��Dm�k7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��Cm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��Bm� 7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��Am�_7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��@m�y7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���?m�=7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��>m�_7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��=m�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��<m�q7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��;m�_7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���:m�;7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives = M� | � � � z � n�<�1�B�= ���ck�I7Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��b]m7Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���ak�97Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��`k�?7Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��_]�7Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���^m�77Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��]m�-7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��\m�M7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��[m�)7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��Zm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���Ym�;7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��Xm}7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��W]�7Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��Vm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��Um{7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��Tm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���Sm�57Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���Rm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��Qm�w7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��Pm�q7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting 4 � F � � M�6��^ � c��qsW8Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)���p� �w7Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��o� � 7Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��nq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��mq�U7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��lq�c7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��kq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��jq�77Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��iq�k7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���hq�/7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��gq�m7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��fk�=7Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���ek�97Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��dk�%7Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � � � - � x � c � o !�x��&�1��[�8�8? � � O��_C8Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��a[8Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t�� ]� 8Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd��� ��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`�� ac8Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� �� a�!8Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface��� i�K8Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��]18Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��]w8Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���a�+8Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���a�E8Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��as8Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���a�)8Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��]�8Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��_W8Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}�� _� 8Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��_m8Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��~_ 8Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��}];8Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���|��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��{]�y8Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��z]q8Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��y]=8Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��x]?8Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��w]� 8Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��v]w8Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��u]18Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��t]c8Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��s]18Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��r]�k8Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts � �ct " r � v - � P [��G�N�}�>z%��%� � k��/]}8Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���.��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��-]q8Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��,]]8Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��+]�8Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��*]�g8Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��)]�8Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��(]I8Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��']�#8Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��&]{8Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��%]o8Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��$]q8Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��#]g8Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��"]y8Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��![�8Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|�� [� 8Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd�� [q8Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J�� [=8Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z�� []8Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/�� [�8Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��_ 8Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��[58Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���[�C8Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��_/8Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��[%8Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��[G8Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��[o8Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��[�}8Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��[�A8Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��[�{8Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��]G8Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��]18Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22 � � �H � ^ � D � r � h � v }��.��C�s�X � � o��O_�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��N_W8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��M[�8Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��La�i8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��K]o8Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��J]o8Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��I[M8Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��H_o8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��G_�{8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��F_�8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��E_� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��D_k8Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��C[{8Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��B[�#8Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��A]� 8Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���@��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��?]Y8Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��>]?8Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��=]�_8Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��<]Y8Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��;] 8Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��:]y8Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��9_{8Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��8[g8Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��7[i8Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��6[� 8Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��5_]8Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���4[�18Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��3[o8Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��2_w8Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��1[� 8Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��0[{8Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121) B � �, � � � � � � � � �z�"��:�F�`�B �P��ka�A8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��ja�K8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��iay8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��hao8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��ga�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��fa� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��ea}8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��da8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��caq8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���ba�)8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��aa� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��`a� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��_a�C8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��^a�]8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��]a�}8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��\]q8Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��[]�98Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��Z_?8Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��Y]�m8Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��X] 8Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��W]U8Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��V]e8Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��U]?8Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��T[Y8Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��S_�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��R_�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��Q_�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��P_a8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393) � eYx�� l��ta{8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��sa{8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��ra� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��qa�Y8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��pa�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��oa�8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��na�78Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��ma� 8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���la�G8Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430) � 2 � 1 � O�[� ��E���R � �2��m�y8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���m�=8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��m�_8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��m�q8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��m�_8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads��� m�;8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�58Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��~m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��}m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��|m�]8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��{]�8Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���zm�;8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���ym�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��x]U8Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��w]� 8Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��v]� 8Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��ua�38Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797) g V� � ~ � A � 9�}U��f�L�[ � g s�� m}8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy�� ]�8Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w�� m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��m{8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���m�58Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��m�w8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��m�q8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��m�c8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���m� 8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��m�+8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��m�O8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��m�?8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���m�98Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�98Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest�� m8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@�� m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48��� m�98Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+�� m�k8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C�� m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��m� 8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��m�_8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize x h�\ � * � �0�+_�q�* x �-��/q�k8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���.q�/8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��-q�m8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��,k�=8Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���+k�98Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��*k�%8Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���)k�I8Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��(]m8Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���'k�98Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��&k�?8Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��%]�8Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���$m�78Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��#m�-8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��"m�M8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��!m�)8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery�� m�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)��� m�;8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close x � � ; � � 9��?�(z�P� x ���@� �w9Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��?� � 9Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��>q�9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��=q�U9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��<q�c9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��;q�9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��:q�79Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��9q�k9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���8q�/9Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�/��7��O8Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���6� �w8Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��5� � 8Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��4q�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��3q�U8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��2q�c8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��1q�8Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��0q�78Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session L � K � 4 ��\ ��� �m��M� �O:Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��L� � :Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��K��O:Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���J� �w:Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��I� � :Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Hq�:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Gq�U:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Fq�c:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Eq�:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Dq�7:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Cq�k:Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content�J��B� � 9Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��A��O9Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function � � � ; � � 9�6�\� � ��\q�<Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��[q�U<Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Zq�c<Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Yq�<Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�$��X� �=;Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��W� �O;Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��V� � ;Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��U��O;Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���T� �w;Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��S� � ;Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Rq�;Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Qq�U;Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Pq�c;Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Oq�;Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Nq�7;Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � ( t %� y�$�P� �/��i��O=Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���h� �w=Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��g� � =Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��fq�=Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��eq�U=Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��dq�c=Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses� ��c� � <Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��b� �=<Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��a� �O<Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��`� � <Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��_��O<Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���^� �w<Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��]� � <Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication � ? � ��c��� �m��u� �O>Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��t� � >Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��s��O>Pavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���r� �w>Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��q� � >Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��pq�>Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��oq�U>Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxyt��n�U=Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��m� � =Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��l� �==Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��k� �O=Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��j� � =Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution � W � N � l D � � P�n �fw��L�c� �| � E��]1?Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��]w?Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���a�+?Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���a�E?Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh�� as?Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit��� a�)?Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep�� ]�?Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY�� _W?Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}�� _� ?Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��_m?Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��_ ?Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��];?Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn�����?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��]�y?Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��]q?Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��]=?Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��]??Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr�� ]� ?Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��]w?Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��~]1?Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��}]c?Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��|]1?Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��{]�k?Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��zsW?Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)w��y� Q>Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els9g���- CVE-2022-30522: fix possible DoSt��x�U>Azat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��w� � >Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��v� �=>Dmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack V b�y � � � 1 � � � S�<��^��@�.�x��E�o � V Q��1]I?Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��0]�#?Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��/]{?Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��.]o?Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��-]q?Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��,]g?Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��+]y?Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��*[�?Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��)[� ?Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��([q?Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��'[=?Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��&[]?Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��%[�?Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��$_ ?Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��#[5?Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���"[�C?Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��!_/?Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>�� [%?Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO�� [G?Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc�� [o?Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+�� [�}?Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M�� [�A?Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��[�{?Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��]G?Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��]1?Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��_C?Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��a[?Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��]� ?Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd�����?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��ac?Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��a�!?Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���i�K?Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf. � ��_ � � � � ; � J � 4�m��Q�R� ��;� � �l��P_�{?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��O_�?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��N_� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��M_k?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��L[{?Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��K[�#?Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��J]� ?Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���I��?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��H]Y?Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��G]??Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��F]�_?Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��E]Y?Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��D] ?Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��C]y?Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��B_{?Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��A[g?Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��@[i?Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��?[� ?Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��>_]?Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���=[�1?Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��<[o?Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��;_w?Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��:[� ?Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��9[{?Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��8]}?Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���7��?Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��6]q?Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��5]]?Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��4]�?Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��3]�g?Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��2]�?Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.conf P �A�q � V � � $ � 1 � V � H _c *�&�2�O � P x��pa�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��oa� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��na}?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��ma?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��laq?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���ka�)?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��ja� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��ia� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��ha�C?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��ga�]?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��fa�}?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��e]q?Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��d]�9?Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��c_??Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��b]�m?Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��a] ?Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��`]U?Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��_]e?Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��^]??Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��][Y?Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��\_�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��[_�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��Z_�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��Y_a?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��X_�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��W_W?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��V[�?Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��Ua�i?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��T]o?Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��S]o?Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��R[M?Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��Q_o?Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header � �'M x`�����m�� l��}a{?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��|a{?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��{a� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��za�Y?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��ya�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��xa�?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��wa�7?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��va� ?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���ua�G?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��ta�A?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��sa�K?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��ray?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��qao?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123) � 2 � 1 � O�[� ��E���R � �2��m�y?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���m�=?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e�� m�_?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8�� m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.�� m�q?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%�� m�_?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads��� m�;?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�5?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��m�]?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��]�?Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���m�;?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��]U?Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}�� ]� ?Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��]� ?Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��~a�3?Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797) g V� � ~ � A � 9�}U��f�L�[ � g s��'m}?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��&]�?Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��%m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��$m{?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��#m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���"m�5?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���!m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1�� m�w?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.�� m�q?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'�� m�c?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx�� m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked��� m� ?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��m�+?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��m�O?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��m�??Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���m�9?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�9?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��m?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���m�9?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��m�k?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��m� ?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��m�_?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize x h�\ � * � �0�+_�q�* x �-��8q�k?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���7q�/?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��6q�m?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��5k�=?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���4k�9?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��3k�%?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���2k�I?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��1]m?Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���0k�9?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��/k�??Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��.]�?Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���-m�7?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��,m�-?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��+m�M?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��*m�)?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��)m�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���(m�;?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close � � � ; � � Y1��=�[ �Sd�z9�P� � � h��Ras@Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���Qa�)@Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��P]�@Joe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��O_W@Joe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��N_� @Joe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��M_m@Joe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��L_ @Joe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��K];@Joe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���J��@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��I]�y@Joe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��H]q@Joe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��G]=@Joe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��F]?@Joe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��E]� @Joe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��D]w@Joe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��C]1@Joe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��B]c@Joe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��A]1@Joe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��@]�k@Joe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��?sW@Robert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)�L��>� � ?Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��=q�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��<q�U?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��;q�c?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��:q�?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��9q�7?Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session o i�s* � � � [ ��}�f����j�X �"�< � o e��r]q@Joe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��q]g@Joe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��p]y@Joe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��o[�@Joe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��n[� @Joe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��m[q@Joe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��l[=@Joe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��k[]@Joe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��j[�@Joe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��i_ @Joe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��h[5@Joe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���g[�C@Joe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��f_/@Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��e[%@Joe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��d[G@Joe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��c[o@Joe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��b[�}@Joe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��a[�A@Joe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��`[�{@Joe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��_]G@Joe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��^]1@Joe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��]_C@Petr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��\a[@Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��[]� @Joe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���Z��@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��Yac@Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��Xa�!@Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���Wi�K@Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��V]1@Joe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��U]w@Joe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���Ta�+@Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���Sa�E@Iain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names ! � �*f � � p � � 0 � L�[�E�~�bc�� �L � }��_� @Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��_k@Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��[{@Joe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��[�#@Joe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��]� @Joe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)�����@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY�� ]Y@Joe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL�� ]?@Joe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� �� ]�_@Joe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y�� ]Y@Joe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<�� ] @Joe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��]y@Joe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��_{@Joe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��[g@Joe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��[i@Joe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��[� @Joe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��_]@Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���[�1@Joe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��[o@Joe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni�� _w@Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��[� @Joe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��~[{@Joe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��}]}@Joe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���|��@Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��{]q@Joe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��z]]@Joe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��y]�@Joe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��x]�g@Joe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��w]�@Joe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��v]I@Joe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��u]�#@Joe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��t]{@Joe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��s]o@Joe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599) q � � k � E � * � Z � y �*�w �3�S�7��| � q ���0a�)@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��/a� @Jan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��.a� @Jan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��-a�C@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��,a�]@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��+a�}@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��*]q@Joe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��)]�9@Joe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��(_?@Daniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��']�m@Joe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��&] @Joe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��%]U@Joe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��$]e@Joe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��#]?@Daniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��"[Y@Joe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��!_�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p�� _�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){�� _�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^�� _a@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o�� _�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY�� _W@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��[�@Joe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��a�i@Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��]o@Joe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��]o@Joe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��[M@Joe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��_o@Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��_�{@Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��_�@Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured. � �#�/ � I � +�@B� � �\��?a�Y@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��>a�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��=a�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��<a�7@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��;a� @Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���:a�G@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��9a�A@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��8a�K@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��7ay@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��6ao@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��5a�@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��4a� @Jan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��3a}@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��2a@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��1aq@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006) � } � � O�s�T��|�$��/r � �e��Rm�_@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��Qm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��Pm�q@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��Om�_@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���Nm�;@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���Mm�5@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��Lm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��Km�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��Jm�]@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��I]�@Joe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���Hm�;@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���Gm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��F]U@Joe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��E]� @Joe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��D]� @Joe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��Ca�3@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��Ba{@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��Aa{@Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��@a� @Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503) � g� = u � . i � Z��G�-�R�� � � r��im{@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��hm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���gm�5@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���fm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��em�w@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��dm�q@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��cm�c@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��bm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���am� @Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��`m�+@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��_m�O@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��^m�?@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���]m�9@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���\m�9@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��[m@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��Zm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���Ym�9@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��Xm�k@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��Wm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��Vm� @Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��Um�_@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��Tm�y@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���Sm�=@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once O �� � | � L � % � W�Z��Z O �.��{q�m@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��zk�=@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���yk�9@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��xk�%@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���wk�I@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��v]m@Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���uk�9@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��tk�?@Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��s]�@Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���rm�7@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��qm�-@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��pm�M@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��om�)@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��nm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���mm�;@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��lm}@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��k]�@Joe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��jm�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invoked l l� b � � N � z��d�p�>��� � � l =��_ AJoe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��];AJoe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn�����AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��]�yAJoe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��]qAJoe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK�� ]=AJoe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L�� ]?AJoe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr�� ]� AJoe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h�� ]wAJoe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE�� ]1AJoe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��]cAJoe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��]1AJoe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��]�kAJoe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��sWARobert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)���� �w@Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � @Nikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�U@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�� q�c@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��q�@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��~q�7@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��}q�k@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���|q�/@Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix [ ��F � Q � 0 � { � X � X_��c � �d"�F�� � [ J��2[=AJoe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��1[]AJoe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��0[�AJoe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��/_ AJoe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��.[5AJoe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���-[�CAJoe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��,_/AJan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��+[%AJoe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��*[GAJoe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��)[oAJoe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��([�}AJoe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��'[�AAJoe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��&[�{AJoe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��%]GAJoe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��$]1AJoe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��#_CAPetr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��"a[AJan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��!]� AJoe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd��� ��AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`�� acAJan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� �� a�!AJan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface��� i�KAVille Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E�� ]1AJoe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��]wAJoe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���a�+AJan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���a�EAIain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��asAJan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���a�)AJan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��]�AJoe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��_WAJoe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��_� AJoe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��_mAJoe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches " ��2 � e � � � v � R � v q� �J�`�F�t�j�x ���T��AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��S]YAJoe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��R]?AJoe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��Q]�_AJoe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��P]YAJoe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��O] AJoe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��N]yAJoe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��M_{AJoe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��L[gAJoe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��K[iAJoe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��J[� AJoe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��I_]AJan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���H[�1AJoe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��G[oAJoe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��F_wAJan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��E[� AJoe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��D[{AJoe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��C]}AJoe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���B��AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��A]qAJoe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��@]]AJoe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��?]�AJoe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��>]�gAJoe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��=]�AJoe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��<]IAJoe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��;]�#AJoe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��:]{AJoe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��9]oAJoe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��8]qAJoe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��7]gAJoe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��6]yAJoe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��5[�AJoe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��4[� AJoe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��3[qAJoe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599) � ��2 � v � � ^ � M�~ �*�7��(������ � �^��ra�]AJan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��qa�}AJan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��p]qAJoe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��o]�9AJoe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��n_?ADaniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��m]�mAJoe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��l] AJoe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��k]UAJoe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��j]eAJoe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��i]?ADaniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��h[YAJoe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��g_�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��f_�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��e_�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��d_aAJan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��c_�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��b_WAJan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��a[�AJoe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��`a�iAJan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��_]oAJoe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��^]oAJoe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��][MAJoe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��\_oAJan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��[_�{AJan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��Z_�AJan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��Y_� AJan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��X_kAJan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��W[{AJoe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��V[�#AJoe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��U]� AJoe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500) � *�& � 2 � O � P � w ���- � �K��a�7AJan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��a� AJan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)��� a�GAJan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��a�AAJan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��~a�KAJan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��}ayAJan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��|aoAJan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��{a�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��za� AJan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��ya}AJan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��xaAJan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��waqAJan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���va�)AJan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��ua� AJan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��ta� AJan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��sa�CAJan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536) E D c � p 2�1�O�[� � � E �%��m�_ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���m�;ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���m�5ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��m�]ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��]�AJoe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���m�;ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws��� m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W�� ]UAJoe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}�� ]� AJoe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|�� ]� AJoe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I�� a�3AJan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��a{AJan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��a{AJan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��a� AJan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��a�YAJan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��a�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��a�AJan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924) B M� � V � � k�� i��]�W� � B �1��+m�wALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��*m�qALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��)m�cALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��(m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���'m� ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��&m�+ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��%m�OALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��$m�?ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���#m�9ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���"m�9ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��!mALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@�� m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48��� m�9ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+�� m�kALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C�� m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D�� m� ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��m�_ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��m�yALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���m�=ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��m�_ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��m�qALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody D z�` � o � { � f � 6 � �A�D� � D ���?k�9ALubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��>k�%ALubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���=k�IALubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��<]mAJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���;k�9ALubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��:k�?ALubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��9]�AJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���8m�7ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��7m�-ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��6m�MALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��5m�)ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��4m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���3m�;ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��2m}ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��1]�AJoe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��0m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��/m{ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��.m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���-m�5ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���,m�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output � � � a � W � � C�o�4����) � �"��Qq�UBLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Pq�cBLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Oq�BLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Nq�7BLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Mq�kBLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���Lq�/BLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�/��K��OAPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���J� �wANikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��I� � ANikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Hq�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Gq�UALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Fq�cALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Eq�ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Dq�7ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Cq�kALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���Bq�/ALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��Aq�mALuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��@k�=ALubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues u }, � � ����+��)u �/��_��OCPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���^� �wCNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��]� � CNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��\q�CLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��[q�UCLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Zq�cCLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Yq�CLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Xq�7CLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Wq�kCLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content�J��V� � BDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��U��OBPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���T� �wBNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��S� � BNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Rq�BLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690 � ? � ( z�P�x�u �m��k� �ODDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��j� � DDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��i��ODPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���h� �wDNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��g� � DNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��fq�DLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��eq�UDLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��dq�cDLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��cq�DLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��bq�7DLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�m��a� �OCDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��`� � CDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution a W � � C � o�4�s�9� � a ��zq�FLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��yq�UFLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��xq�cFLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses� ��w� � EDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��v� �=EDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��u� �OEDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��t� � EDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��s��OEPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���r� �wENikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��q� � ENikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��pq�ELuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��oq�UELuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��nq�cELuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��mq�ELuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�$��l� �=DDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack K � ( t %� yZ���K �/����OGPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���� �wGNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � GNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�GLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�UGLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxyt���UFAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��� � FDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$�� � �=FDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��� �OFDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��~� � FDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��}��OFPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���|� �wFNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��{� � FNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication E � ? � � ��:��#�]����# � E Y�� _WHJoe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}�� _� HJoe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d�� _mHJoe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��_ HJoe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��];HJoe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn�����HFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��]�yHJoe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��]qHJoe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��]=HJoe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��]?HJoe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��]� HJoe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��]wHJoe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��]1HJoe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��]cHJoe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��]1HJoe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��]�kHJoe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��sWHRobert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)w�� � QGVladimir D. Seleznev <vseleznev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els9g���- CVE-2022-30522: fix possible DoSt�� �UGAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� �� � � GDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$�� � �=GDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m�� � �OGDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��� � GDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution � �� v � # � : � � E��Ufd��h �BM��9 � |��=[� HJoe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��<[qHJoe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��;[=HJoe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��:[]HJoe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��9[�HJoe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��8_ HJoe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��7[5HJoe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���6[�CHJoe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��5_/HJan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��4[%HJoe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��3[GHJoe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��2[oHJoe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��1[�}HJoe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��0[�AHJoe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��/[�{HJoe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��.]GHJoe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��-]1HJoe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��,_CHPetr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��+a[HJan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��*]� HJoe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���)��HFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��(acHJan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��'a�!HJan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���&i�KHVille Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��%]1HJoe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��$]wHJoe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���#a�+HJan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���"a�EHIain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��!asHJan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit��� a�)HJan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep�� ]�HJoe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default config " m ��M � w � ^ � : � ^ � Y�}�2�H�.�\��R�`g � m ~��_[�#HJoe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��^]� HJoe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���]��HFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��\]YHJoe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��[]?HJoe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��Z]�_HJoe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��Y]YHJoe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��X] HJoe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��W]yHJoe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��V_{HJoe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��U[gHJoe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��T[iHJoe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��S[� HJoe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��R_]HJan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���Q[�1HJoe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��P[oHJoe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��O_wHJan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��N[� HJoe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��M[{HJoe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��L]}HJoe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���K��HFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��J]qHJoe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��I]]HJoe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��H]�HJoe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��G]�gHJoe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��F]�HJoe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��E]IHJoe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��D]�#HJoe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��C]{HJoe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��B]oHJoe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��A]qHJoe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��@]gHJoe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��?]yHJoe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��>[�HJoe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support � �,� p � X � G � x �$�1��"������� � �Q��|a�CHJan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��{a�]HJan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��za�}HJan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��y]qHJoe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��x]�9HJoe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��w_?HDaniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��v]�mHJoe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��u] HJoe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��t]UHJoe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��s]eHJoe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��r]?HDaniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��q[YHJoe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��p_�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��o_�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��n_�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��m_aHJan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��l_�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��k_WHJan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��j[�HJoe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��ia�iHJan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��h]oHJoe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��g]oHJoe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��f[MHJoe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��e_oHJan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��d_�{HJan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��c_�HJan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��b_� HJan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��a_kHJan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��`[{HJoe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438) � ~�s � % � & � M s ��� � �y�� a�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K�� a�7HJan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)�� a� HJan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)��� a�GHJan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��a�AHJan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��a�KHJan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��ayHJan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��aoHJan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��a�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��a� HJan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��a}HJan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��aHJan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g�� aqHJan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���a�)HJan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��~a� HJan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��}a� HJan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078) � Ba � n �0�/�M�Y���C � �.�� m�qHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%�� m�_HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads��� m�;HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives��� m�5HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��m�]HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��]�HJoe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���m�;HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��]UHJoe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��]� HJoe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��]� HJoe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��a�3HJan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��a{HJan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��a{HJan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��a� HJan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��a�YHJan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9�� a�HJan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416) o CY � _ � � ��J� B�� ^� � o ���5m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��4m�wHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��3m�qHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��2m�cHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��1m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���0m� HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��/m�+HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��.m�OHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��-m�?HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���,m�9HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���+m�9HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��*mHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��)m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���(m�9HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��'m�kHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��&m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��%m� HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��$m�_HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��#m�yHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���"m�=HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��!m�_HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8�� m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter � k�p � x i � ] � + � �1�,` � ���Hk�9HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��Gk�%HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���Fk�IHLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��E]mHJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���Dk�9HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��Ck�?HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��B]�HJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���Am�7HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��@m�-HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��?m�MHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��>m�)HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��=m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���<m�;HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes��;m}HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��:]�HJoe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��9m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��8m{HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��7m�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���6m�5HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN w � � a � W � � C�o��5�� �k w ���^��IFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��]]�yIJoe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��\]qIJoe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��[]=IJoe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L��Z]?IJoe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr��Y]� IJoe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h��X]wIJoe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE��W]1IJoe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^��V]cIJoe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��U]1IJoe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��T]�kIJoe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflictsc��SsWIRobert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)�L��R� � HNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��Qq�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��Pq�UHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Oq�cHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Nq�HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Mq�7HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��Lq�kHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���Kq�/HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��Jq�mHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��Ik�=HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues x �q �+ � . � + � 5 � N � e��p ���?�(��J�m, x �/��~[�IJoe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��}_ IJoe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��|[5IJoe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���{[�CIJoe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��z_/IJan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��y[%IJoe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��x[GIJoe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��w[oIJoe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��v[�}IJoe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��u[�AIJoe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��t[�{IJoe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��s]GIJoe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��r]1IJoe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22O��q_CIPetr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��pa[IJan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��o]� IJoe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���n��IFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��macIJan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��la�!IJan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���ki�KIVille Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��j]1IJoe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��i]wIJoe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���ha�+IJan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���ga�EIIain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��fasIJan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���ea�)IJan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��d]�IJoe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��c_WIJoe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��b_� IJoe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��a_mIJoe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��`_ IJoe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��_];IJoe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn # o �T�l � � " � Q � � L � )�a�V�r����7�[� � o Y��!]YIJoe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL�� ]?IJoe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� �� ]�_IJoe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y�� ]YIJoe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<�� ] IJoe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi�� ]yIJoe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��_{IJoe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��[gIJoe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��[iIJoe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��[� IJoe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��_]IJan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���[�1IJoe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��[oIJoe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��_wIJan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��[� IJoe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��[{IJoe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121)k��]}IJoe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)�����IFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��]qIJoe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��]]IJoe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy�� ]�IJoe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!�� ]�gIJoe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez�� ]�IJoe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ�� ]IIJoe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?�� ]�#IJoe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��]{IJoe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��]oIJoe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��]qIJoe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��]gIJoe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��]yIJoe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��[�IJoe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��[� IJoe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��[qIJoe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J�� [=IJoe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��[]IJoe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073) L d�j � � � � � * � Z�?�o ��?��1�H�h�L �.��?a�}IJan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��>]qIJoe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��=]�9IJoe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��<_?IDaniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��;]�mIJoe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<��:] IJoe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��9]UIJoe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��8]eIJoe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��7]?IDaniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��6[YIJoe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��5_�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��4_�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��3_�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��2_aIJan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393)o��1_�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��0_WIJan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��/[�IJoe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��.a�iIJan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��-]oIJoe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��,]oIJoe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��+[MIJoe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��*_oIJan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��)_�{IJan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��(_�IJan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��'_� IJan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��&_kIJan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��%[{IJoe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��$[�#IJoe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��#]� IJoe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���"��IFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � � � E � : � ] � i � � :eM � ��Oa� IJan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���Na�GIJan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)�P��Ma�AIJan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��La�KIJan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��KayIJan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��JaoIJan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��Ia�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��Ha� IJan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m��Ga}IJan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n��FaIJan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g��EaqIJan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)���Da�)IJan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~��Ca� IJan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��Ba� IJan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��Aa�CIJan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��@a�]IJan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608) 7 � � � � ��b���g� � � 7 ���am�5ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��`m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��_m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��^m�]ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��]]�IJoe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���\m�;ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���[m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W��Z]UIJoe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}��Y]� IJoe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|��X]� IJoe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I��Wa�3IJan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)l��Va{IJan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��Ua{IJan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��Ta� IJan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��Sa�YIJan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��Ra�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��Qa�IJan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��Pa�7IJan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015) i h� N d � j ��)��U�'M�� i �'��wm�cILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��vm�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���um� ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��tm�+ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��sm�OILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��rm�?ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���qm�9ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���pm�9ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��omILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��nm�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���mm�9ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��lm�kILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��km�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��jm� ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��im�_ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize�2��hm�yILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���gm�=ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��fm�_ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��em�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��dm�qILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��cm�_ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���bm�;ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives = M� | � � � z � n�<�1�B�= ��� k�IILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�� ]mIJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��� k�9ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��k�?ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��]�IJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���m�7ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��m�-ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��m�MILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��m�)ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���m�;ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after closes�� m}ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��]�IJoe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��~m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��}m{ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��|m�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���{m�5ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���zm�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��ym�wILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��xm�qILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting 4 � F � � M�6��^ � c��sWJRobert Scheck <robert@fedoraproject.org> - 2.2.15-1K�@- update to 2.2.15 (#572404, #579311)���� �wINikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � INikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�UILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��q�cILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��q�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��q�7ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��q�kILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���q�/ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��q�mILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��k�=ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��� k�9ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�� k�%ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � � � - � x � c � o !�x��&�1��[�8�8? � � O��7_CJPetr Pisar <ppisar@redhat.com> - 2.2.21-8O5�- Rebuild against PCRE 8.30\��6a[JJan Kaluza <jkaluza@redhat.com> - 2.2.21-7O K�- fix #783629 - start httpd after named�t��5]� JJoe Orton <jorton@redhat.com> - 2.2.21-6O@- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd���4��JFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild`��3acJJan Kaluza <jkaluza@redhat.com> - 2.2.21-4N��- fix #751591 - start httpd after remote-fs� ��2a�!JJan Kaluza <jkaluza@redhat.com> - 2.2.21-3N�S@- allow change state of BalancerMember in mod_proxy_balancer web interface���1i�KJVille Skyttä <ville.skytta@iki.fi> - 2.2.21-2N{#@- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.E��0]1JJoe Orton <jorton@redhat.com> - 2.2.21-1NoE�- update to 2.2.21h��/]wJJoe Orton <jorton@redhat.com> - 2.2.20-1Nd��- update to 2.2.20 - fix MPM stub man page generation���.a�+JJan Kaluza <jkaluza@redhat.com> - 2.2.19-5NBr�- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd���-a�EJIain Arnell <iarnell@gmail.com> 1:2.2.19-4N)f@- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory namesh��,asJJan Kaluza <jkaluza@redhat.com> - 2.2.19-3N&�@- fix #716621 - suexec now works without setuid bit���+a�)JJan Kaluza <jkaluza@redhat.com> - 2.2.19-2N �@- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolvep��*]�JJoe Orton <jorton@redhat.com> - 2.2.19-1N ��- update to 2.2.19 - enable dbd, authn_dbd in default configY��)_WJJoe Orton <jorton@redhat.com> - 2.2.17-13M��- fix path expansion in service files}��(_� JJoe Orton <jorton@redhat.com> - 2.2.17-12M�>�- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)d��'_mJJoe Orton <jorton@redhat.com> - 2.2.17-11M��- minor updates to httpd.conf - drop old patches=��&_ JJoe Orton <jorton@redhat.com> - 2.2.17-10Mn1@- rebuildJ��%];JJoe Orton <jorton@redhat.com> - 2.2.17-9Md��- use arch-specific mmn���$��JFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8MR��- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild�j��#]�yJJoe Orton <jorton@redhat.com> - 2.2.17-7MF�@- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init scripte��"]qJJoe Orton <jorton@redhat.com> - 2.2.17-6M(Q�- update default SSLCipherSuite per upstream trunkK��!]=JJoe Orton <jorton@redhat.com> - 2.2.17-5M$]A- fix requires (#667397)L�� ]?JJoe Orton <jorton@redhat.com> - 2.2.17-4M$]@- de-ghost /var/run/httpdr�� ]� JJoe Orton <jorton@redhat.com> - 2.2.17-3M# �- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)h�� ]wJJoe Orton <jorton@redhat.com> - 2.2.17-2L�@- drop setuid bit, use capabilities for suexec binaryE�� ]1JJoe Orton <jorton@redhat.com> - 2.2.17-1L�@- update to 2.2.17^�� ]cJJoe Orton <jorton@redhat.com> - 2.2.16-2L� �- link everything using -z relro and -z nowE��]1JJoe Orton <jorton@redhat.com> - 2.2.16-1LMx�- update to 2.2.16�#��]�kJJoe Orton <jorton@redhat.com> - 2.2.15-3L7@- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts � �ct " r � v - � P [��G�N�}�>z%��%� � k��W]}JJoe Orton <jorton@redhat.com> - 2.4.2-23P ��- add mod_proxy fixes from upstream (r1366693, r1365604)���V��JFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuilde��U]qJJoe Orton <jorton@redhat.com> - 2.4.2-21O��@- drop explicit version requirement on initscripts[��T]]JJoe Orton <jorton@redhat.com> - 2.4.2-20O���- mod_ext_filter: fix error_log warningsy��S]�JJoe Orton <jorton@redhat.com> - 2.4.2-19O�@- support "configtest" and "graceful" as initscripts "legacy actions"�!��R]�gJJoe Orton <jorton@redhat.com> - 2.4.2-18O��@- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit filez��Q]�JJoe Orton <jorton@redhat.com> - 2.4.2-17OЗ�- use _unitdir for systemd unit file - use /run in unit file, ssl.confQ��P]IJJoe Orton <jorton@redhat.com> - 2.4.2-16OЗ�- mod_ssl: fix NPN patch merge�?��O]�#JJoe Orton <jorton@redhat.com> - 2.4.2-15O�FB- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewisej��N]{JJoe Orton <jorton@redhat.com> - 2.4.2-14O�FA- fix htdbm/htpasswd crash on crypt() failure (#818684)d��M]oJJoe Orton <jorton@redhat.com> - 2.4.2-13O�F@- pull fix for NPN patch from upstream (r1345599)e��L]qJJoe Orton <jorton@redhat.com> - 2.4.2-12O�]@- update suexec patch to use LOG_AUTHPRIV facility`��K]gJJoe Orton <jorton@redhat.com> - 2.4.2-11O�"�- really fix autoindex.conf (thanks to remi@)i��J]yJJoe Orton <jorton@redhat.com> - 2.4.2-10O�"�- fix autoindex.conf to allow symlink to poweredby.pngu��I[�JJoe Orton <jorton@redhat.com> - 2.4.2-9O��A- suexec: use upstream version of patch for capability bit support|��H[� JJoe Orton <jorton@redhat.com> - 2.4.2-8O��@- suexec: use syslog rather than suexec.log, drop dac_override capabilityd��G[qJJoe Orton <jorton@redhat.com> - 2.4.2-7O��A- mod_ssl: add TLS NPN support (r1332643, #809599)J��F[=JJoe Orton <jorton@redhat.com> - 2.4.2-6O��@- add BR on APR >= 1.4.0Z��E[]JJoe Orton <jorton@redhat.com> - 2.4.2-5O��B- use systemctl from logrotate (#221073)�/��D[�JJoe Orton <jorton@redhat.com> - 2.4.2-4O��A- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)=��C_ JJoe Orton <jorton@redhat.com> - 2.4.2-3.2O��@- rebuildF��B[5JJoe Orton <jorton@redhat.com> - 2.4.2-3O�O�- really fix restart���A[�CJJoe Orton <jorton@redhat.com> - 2.4.2-2O�O�- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by defaultE��@_/JJan Kaluza <jkaluza@redhat.com> - 2.4.2-1O���- update to 2.4.2>��?[%JJoe Orton <jorton@redhat.com> - 2.4.1-6Ole�- fix macrosO��>[GJJoe Orton <jorton@redhat.com> - 2.4.1-5Ole�- add _httpd_moddir to macrosc��=[oJJoe Orton <jorton@redhat.com> - 2.4.1-4O_6�- fix symlink for poweredby.png - fix manual.conf�+��<[�}JJoe Orton <jorton@redhat.com> - 2.4.1-3O_6�- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage�M��;[�AJJoe Orton <jorton@redhat.com> - 2.4.1-2O_6�- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir�j��:[�{JJoe Orton <jorton@redhat.com> - 2.4.1-1OU�@- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelogP��9]GJJoe Orton <jorton@redhat.com> - 2.2.22-2O8�A- fix build against PCRE 8.30E��8]1JJoe Orton <jorton@redhat.com> - 2.2.22-1O8�@- update to 2.2.22 � � �H � ^ � D � r � h � v }��.��C�s�X � � o��w_�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-3RC@- fix "LDAPReferrals off" to really disable LDAP ReferralsY��v_WJJan Kaluza <jkaluza@redhat.com> - 2.4.6-2Q��@- revert fix for dumping vhosts twicen��u[�JJoe Orton <jorton@redhat.com> - 2.4.6-1Q� �- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)�$��ta�iJJan Kaluza <jkaluza@redhat.com> - 2.4.4-12Qޞ@- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpaged��s]oJJoe Orton <jorton@redhat.com> - 2.4.4-11Q��- add patch for aarch64 (Dennis Gilmore, #925558)d��r]oJJoe Orton <jorton@redhat.com> - 2.4.4-10Q�o@- remove duplicate apxs man page from httpd-toolsR��q[MJJoe Orton <jorton@redhat.com> - 2.4.4-9Q��@- remove zombie dbmmanage scripte��p_oJJan Kaluza <jkaluza@redhat.com> - 2.4.4-8Q���- return 400 Bad Request on malformed Host header�l��o_�{JJan Kaluza <jkaluza@redhat.com> - 2.4.4-6Q�@- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)�6��n_�JJan Kaluza <jkaluza@redhat.com> - 2.4.4-5Qo�@- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.}��m_� JJan Kaluza <jkaluza@redhat.com> - 2.4.4-4Qm=@- fix service file to not send SIGTERM after ExecStop (#906321, #912288)c��l_kJJan Kaluza <jkaluza@redhat.com> - 2.4.4-3QQ��- protect MIMEMagicFile with IfModule (#893949)i��k[{JJoe Orton <jorton@redhat.com> - 2.4.4-2Q,��- really package mod_auth_form in mod_session (#915438)~��j[�#JJoe Orton <jorton@redhat.com> - 2.4.4-1Q,��- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)t��i]� JJoe Orton <jorton@redhat.com> - 2.4.3-17Q']�- add mod_session subpackage, move mod_auth_form there (#894500)���h��JFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildY��g]YJJoe Orton <jorton@redhat.com> - 2.4.3-15P� @- add systemd service for htcachecleanL��f]?JJoe Orton <jorton@redhat.com> - 2.4.3-14P�6A- drop patch for r1344712� ��e]�_JJoe Orton <jorton@redhat.com> - 2.4.3-13P�6@- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)Y��d]YJJoe Orton <jorton@redhat.com> - 2.4.3-12P�{@- rebuild to pick up new apr-util-ldap<��c] JJoe Orton <jorton@redhat.com> - 2.4.3-11P���- rebuildi��b]yJJoe Orton <jorton@redhat.com> - 2.4.3-10Pl(�- pull upstream patch r1392850 in addition to r1387633k��a_{JJoe Orton <jorton@redhat.com> - 2.4.3-9.1Pi��- restore "ServerTokens Full-Release" support (#811714)_��`[gJJoe Orton <jorton@redhat.com> - 2.4.3-9Pi��- define PLATFORM in os.h using vendor string`��_[iJJoe Orton <jorton@redhat.com> - 2.4.3-8Pi��- use systemd script unconditionally (#850149)�1��^[� JJoe Orton <jorton@redhat.com> - 2.4.3-7Pi��- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists\��]_]JJan Kaluza <jkaluza@redhat.com> - 2.4.3-6Pi��- use systemctl from apachectl (#842736)���\[�1JJoe Orton <jorton@redhat.com> - 2.4.3-5PY��- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaksc��[[oJJoe Orton <jorton@redhat.com> - 2.4.3-4PQ�- use IncludeOptional for conf.d/*.conf inclusioni��Z_wJJan Kaluza <jkaluza@redhat.com> - 2.4.3-3PI�- adding mod_systemd to integrate with systemd betters��Y[� JJoe Orton <jorton@redhat.com> - 2.4.3-2P3xA- mod_ssl: add check for proxy keypair match (upstream r1374214)i��X[{JJoe Orton <jorton@redhat.com> - 2.4.3-1P3x@- update to 2.4.3 (#849883) - own the docroot (#848121) B � �, � � � � � � � � �z�"��:�F�`�B �P��a�AJJan Kaluza <jkaluza@redhat.com> - 2.4.6-31T}��- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)�U��a�KJJan Kaluza <jkaluza@redhat.com> - 2.4.6-30Tto@- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)k��ayJJan Kaluza <jkaluza@redhat.com> - 2.4.6-29TX��- rebuild against proper version of OpenSSL (#1080125)f��aoJJan Kaluza <jkaluza@redhat.com> - 2.4.6-28TG�@- set vstring based on /etc/os-release (#1114123)x��a�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-27T2�@- fix the dependency on openssl-libs to match the fix for #1080125��a� JJan Kaluza <jkaluza@redhat.com> - 2.4.6-26T @- allow <Auth*ProviderAlias>'es to be seen under virtual hosts (#1131847)m�� a}JJan Kaluza <jkaluza@redhat.com> - 2.4.6-25T �- do not use hardcoded curve for ECDHE suites (#1080125)n�� aJJan Kaluza <jkaluza@redhat.com> - 2.4.6-24T�- allow reverse-proxy to be set via SetHandler (#1136290)g�� aqJJan Kaluza <jkaluza@redhat.com> - 2.4.6-23S��@- fix possible crash in SIGINT handling (#1131006)��� a�)JJan Kaluza <jkaluza@redhat.com> - 2.4.6-22S��- ab: fix integer overflow when printing stats with lot of requests (#1092420)~�� a� JJan Kaluza <jkaluza@redhat.com> - 2.4.6-21S�@- add pre_htaccess so mpm-itk can be build as separate module (#1059143)~��a� JJan Kaluza <jkaluza@redhat.com> - 2.4.6-20S��@- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)�Q��a�CJJan Kaluza <jkaluza@redhat.com> - 2.4.6-19S�u�- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)�^��a�]JJan Kaluza <jkaluza@redhat.com> - 2.4.6-18SǺ�- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)�.��a�}JJan Kaluza <jkaluza@redhat.com> - 2.4.6-17S*�@- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)e��]qJJoe Orton <jorton@redhat.com> - 2.4.6-16S�- mod_ssl: improve DH temp key handling (#1057687)� ��]�9JJoe Orton <jorton@redhat.com> - 2.4.6-15S�- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)M��_?JDaniel Mach <dmach@redhat.com> - 2.4.6-14R�U�- Mass rebuild 2014-01-24�$��]�mJJoe Orton <jorton@redhat.com> - 2.4.6-13R��@- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)<�� ] JJoe Orton <jorton@redhat.com> - 2.4.6-12R��- rebuildW��]UJJoe Orton <jorton@redhat.com> - 2.4.6-11RΏ@- build with -O3 on ppc64 (#1051066)_��~]eJJoe Orton <jorton@redhat.com> - 2.4.6-10R��@- mod_dav: fix locktoken handling (#1004046)L��}]?JDaniel Mach <dmach@redhat.com> - 2.4.6-9R�k�- Mass rebuild 2013-12-27X��|[YJJoe Orton <jorton@redhat.com> - 2.4.6-8R�1@- use unambiguous httpd-mmn (#1029360){��{_�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-7Rs��- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)p��z_�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-6RrF@- systemd: Use {MAINPID} notation in service file (#969972){��y_�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-5Ri �- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)^��x_aJJan Kaluza <jkaluza@redhat.com> - 2.4.6-4RM\@- expand macros in macros.httpd (#1011393) � eYx�� l�� a{JJan Kaluza <jkaluza@redhat.com> - 2.4.6-40U��@- mod_dav: follow up fix for previous commit (#1263975)l��a{JJan Kaluza <jkaluza@redhat.com> - 2.4.6-39Uݪ@- mod_dav: treat dav_resource uri as escaped (#1255480)��a� JJan Kaluza <jkaluza@redhat.com> - 2.4.6-38U�o�- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)�\��a�YJJan Kaluza <jkaluza@redhat.com> - 2.4.6-37UȒ@- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)�9��a�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-36U���- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)�y��a�JJan Kaluza <jkaluza@redhat.com> - 2.4.6-35U��@- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)�K��a�7JJan Kaluza <jkaluza@redhat.com> - 2.4.6-34Un�@- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)��a� JJan Kaluza <jkaluza@redhat.com> - 2.4.6-33UY�@- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)���a�GJJan Kaluza <jkaluza@redhat.com> - 2.4.6-32U.R�- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430) � 2 � 1 � O�[� ��E���R � �2��.m�yJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-58X@- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp���-m�=JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-57X�C�- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once�e��,m�_JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-56X��A- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)�8��+m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-55X��@- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter�.��*m�qJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-54X���- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody�%��)m�_JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-53X���- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads���(m�;JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-52X���- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives���'m�5JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-51X�OC- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn�>��&m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-50X�OB- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is overx��%m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-49X�OA- Resolves: #1389535 - Segmentation fault in SSL_renegotiate�$��$m�]JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-48X�O@- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty�.��#]�JJoe Orton <jorton@redhat.com> - 2.4.6-47X���- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)���"m�;JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-46X��- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws���!m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-45W��- RFE: run mod_rewrite external mapping program as non-root (#1316900)W�� ]UJJoe Orton <jorton@redhat.com> - 2.4.6-44W��- add security fix for CVE-2016-5387}�� ]� JJoe Orton <jorton@redhat.com> - 2.4.6-43W{�@- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)|�� ]� JJoe Orton <jorton@redhat.com> - 2.4.6-42Wc�@- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)�I�� a�3JJan Kaluza <jkaluza@redhat.com> - 2.4.6-41V͛@- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797) g V� � ~ � A � 9�}U��f�L�[ � g s��Fm}JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-82[ d@- Resolves: #1533793 - Use Variable with mod_authnz_ldapy��E]�JJoe Orton <jorton@redhat.com> - 2.4.6-81Z��- don't terminate connections during graceful stop/restart (#1557785)w��Dm�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-80ZS]@- Related: #1288395 - httpd segfault when logrotate invokedr��Cm{JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-79Y��@- Resolves: #1274890 - mod_ssl config: tighten defaults� ��Bm�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-78Y�e�- Resolves: #1506392 - Backport: SSLSessionTickets directive support���Am�5JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-77Y�@- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN���@m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-76Y�YA- Resolves: #1464406 - Apache consumes too much memory for CGI output�1��?m�wJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-75Y�Y@- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.�.��>m�qJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-74Y�d�- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside <Proxy> setting�'��=m�cJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-73Y�p@- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_pathx��<m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-72Y�{�- Resolves: #1288395 - httpd segfault when logrotate invoked���;m� JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-71Y�{�- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing� ��:m�+JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-70Y�*@- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used� ��9m�OJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-69Y��- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method�U��8m�?JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-68Yw2�- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest���7m�9JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-67Y�A- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives���6m�9JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-66Y�@- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directivest��5mJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-65Y�@- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS�@��4m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-64X���- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48���3m�9JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-63X�g@- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws�+��2m�kJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-62X�,�- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat�C��1m�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-61X�,�- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�D��0m� JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-60X��@- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()�%��/m�_JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-59XƉ�- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize x h�\ � * � �0�+_�q�* x �-��Wq�kJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���Vq�/JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.��Uq�mJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S��Tk�=JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues���Sk�9JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G��Rk�%JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications���Qk�IJLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec��P]mJJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)���Ok�9JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T��Nk�?JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq��M]�JJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)���Lm�7JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�B- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1� ��Km�-JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-87[+�A- Resolves: #1458364 - RMM list corruption in ldap module results in server hang� ��Jm�MJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-86[+�@- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case� ��Im�)JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-85[*A�- Resolves: #1556761 - mod_proxy_wstunned config needs the default port numbery��Hm�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-84['��- Resolves: #1548501 - Make OCSP more configurable (like CRL)���Gm�;JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-83[ dA- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close x � � ; � � 9��?�(z�P� x ���h� �wKNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��g� � KNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��fq�KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��eq�UKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��dq�cKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��cq�KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��bq�7KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��aq�kKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content���`q�/KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�/��_��OJPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���^� �wJNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��]� � JNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��\q�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��[q�UJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��Zq�cJLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��Yq�JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��Xq�7JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session L � K � 4 ��\ ��� �m��u� �OLDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��t� � LDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��s��OLPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���r� �wLNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��q� � LNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��pq�LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��oq�ULLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��nq�cLLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��mq�LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��lq�7LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session�-��kq�kLLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content�J��j� � KDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��i��OKPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function � � � ; � � 9�6�\� � ��q�NLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�UNLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��q�cNLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��q�NLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�$�� � �=MDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��� �OMDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��~� � MDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/��}��OMPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���|� �wMNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��{� � MNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��zq�MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��yq�UMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)��xq�cMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:��wq�MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S��vq�7MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � ( t %� y�$�P� �/����OOPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���� �wONikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � ONikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�OLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�� q�UOLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�� q�cOLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses� �� � � NDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$�� � �=NDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m�� � �ONDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��� � NDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/����ONPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���� �wNNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � NNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication � ? � ��c��� �m�� � �OPDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J�� � � PDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution�/����OPPavel Mayorov <pmayorov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els3eB=�- CVE-2023-31122: mod_macro: Fix out-of-bounds read vulnerability by using own strncmp function���� �wPNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els2e��- CVE-2021-26690: Fix NULL pointer dereference in mod_session - CVE-2022-22719: Fix possible process crash due to unnoticed failures in mod_lua - CVE-2022-29404: Fix possible DoS due to no default limit on possible input size in mod_lua - CVE-2022-26377: Fix possible HTTP request smuggling in mod_proxy_ajp�L��� � PNikita Ivanov <nivanov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els1e 0@- CVE-2022-23943: Fix out-of-bound write in mod_sed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in ap_strcmp_match() - CVE-2022-31813: Fix possible bypass of IP based authentication��q�PLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"��q�UPLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxyt���UOAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� ��� � ODmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$��� �=ODmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack�m��� �OODmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els5f���- CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix. - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix.�J��� � ODmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els4f��@- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39573: mod_rewrite: proxy handler substitution l W � N � c � � � @ � Y��*����7��4�* l �9��:{�yQJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���9{� QJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��8{�QJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��7}YQDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��6}iQDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��5{�QJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���4� �QFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��3m[QTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��2m�QDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��1iyQPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��0coQDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���/c�?QDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���.� �QFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��-m{QDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��,c�QDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��+uYQHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��*uKQHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��)mQDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��(m�)QDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��'cIQDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��&c� QDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��%a�+QBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��$y QDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��#y�!QDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��"ycQDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.w��!� QPVladimir D. Seleznev <vseleznev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els9g���- CVE-2022-30522: fix possible DoSt�� �UPAzat Nurgaliev <anurgaliev@cloudlinux.com> - 2.4.6-99.1.tuxcare.els8g\!�- mod_session: Fix separator parsing� �� � � PDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els7f�)@- mod_proxy: Fix ProxySourceAddress binding failure with AH00938�$�� � �=PDmitriy Popov <dpopov@cloudlinux.com> - 2.4.6-99.1.tuxcare.els6f�@- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack � �#� � � � j � q � u��5�O�O�� ��3 � ���X�+QJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��W�oQPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��VOQJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���U� QJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��TqQJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���S�-QJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��R}?QDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��Q�QJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��P�IQJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��O� QJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��NgQJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��M�QJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��LqQJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��KUQJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��JUQJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��IKeQJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��HqQJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��GuQJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��FK�/QJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��E�uQVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��DK� QJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��CK}QJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��BK�;QJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��AK�QJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��@K�!QJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��?{� QJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���>{�QJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��={�QJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmwarec��<{OQJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��;{mQJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev R � Z � ? � ��pe/�� �,��g��WQRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��f��9QRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���e�� QRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��d��aQRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���c�� QRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��b��9QRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��a�� QRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���`}�QJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��_��eQRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���^��#QRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���]��+QRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��\�yQRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��[��QRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��Z��EQRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��Y�UQJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���z��QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��y�� QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��x��#QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���w��QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��v��QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���u�� QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��t��?QBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��s��1QRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���r��3QRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��q��aQRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��p�AQRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��o��WQRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���n��'QRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��m�QRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���l�� QRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��k��)QRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���j�� QRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��i��QRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��h��QQRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M�� ��RRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M�� ��RRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � oRAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5RJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[RJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5RJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)����'�}QPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M����QRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oQAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5QJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[QJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5QJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���iQJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'QJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� QJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��~��OQJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��}��+QBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��|��QBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��{��OQBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � �� �'sSPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�SPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9SDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}SPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]SRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����SRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����SRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oSAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5SJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[SJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ���'sRPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�RPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9RDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}RPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]RRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��8{OTJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��7{mTJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��6{�yTJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���5{� TJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��4{�TJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��3}YTDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��2}iTDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��1{�TJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���0� �TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��/m[TTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��.m�TDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��-iyTPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��,coTDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���+c�?TDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���*� �TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��)m{TDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��(c�TDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��'uYTHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��&uKTHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��%mTDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��$m�)TDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��#cITDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��"c� TDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��!a�+TBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I�� y TDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� �� y�!TDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l�� ycTDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G�� �'�gSPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���T�+TJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��S�oTPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��ROTJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���Q� TJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��PqTJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���O�-TJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��N}?TDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��M�TJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��L�ITJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��K� TJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��JgTJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��I�TJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��HqTJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��GUTJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��FUTJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��EKeTJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��DqTJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��CuTJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��BK�/TJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��A�uTVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��@K� TJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��?K}TJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��>K�;TJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��=K�TJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��<K�!TJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��;{� TJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���:{�TJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��9{�TJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��c��WTRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��b��9TRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���a�� TRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��`��aTRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���_�� TRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��^��9TRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��]�� TRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���\}�TJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��[��eTRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���Z��#TRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���Y��+TRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��X�yTRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��W��TRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��V��ETRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��U�UTJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���v��TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��u�� TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��t��#TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���s��TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��r��TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���q�� TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��p��?TBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��o��1TRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���n��3TRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��m��aTRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��l�ATRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��k��WTRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���j��'TRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��i�TRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���h�� TRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��g��)TRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���f�� TRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��e��TRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��d��QTRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M�� ��URado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����URado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oUAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5UJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[UJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5UJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)����'�}TPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M����TRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oTAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5TJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[TJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���~��5TJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��}�iTJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��|��'TJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��{�� TJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��z��OTJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��y��+TBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��x��TBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��w��OTBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ���'sVPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�VPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9VDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}VPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]VRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����VRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����VRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oVAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5VJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[VJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ���'sUPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V�� �'�UPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`�� ��9UDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021��� �'�}UPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1�� ��]URado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��4{OWJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��3{mWJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��2{�yWJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���1{� WJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��0{�WJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��/}YWDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��.}iWDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��-{�WJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���,� �WFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��+m[WTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��*m�WDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��)iyWPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��(coWDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���'c�?WDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���&� �WFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��%m{WDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��$c�WDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��#uYWHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��"uKWHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��!mWDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� �� m�)WDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T�� cIWDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw�� c� WDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E�� a�+WBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I�� y WDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!WDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��ycWDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G���'�gVPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���P�+WJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��O�oWPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��NOWJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���M� WJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��LqWJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���K�-WJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��J}?WDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��I�WJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��H�IWJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��G� WJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��FgWJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��E�WJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��DqWJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��CUWJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��BUWJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��AKeWJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��@qWJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��?uWJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��>K�/WJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��=�uWVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��<K� WJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��;K}WJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��:K�;WJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��9K�WJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��8K�!WJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��7{� WJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���6{�WJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��5{�WJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��_��WWRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��^��9WRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���]�� WRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��\��aWRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���[�� WRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��Z��9WRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��Y�� WRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���X}�WJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��W��eWRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���V��#WRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���U��+WRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��T�yWRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��S��WRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��R��EWRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��Q�UWJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���r��WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��q�� WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��p��#WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���o��WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��n��WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���m�� WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��l��?WBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��k��1WRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���j��3WRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��i��aWRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��h�AWRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��g��WWRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���f��'WRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��e�WRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���d�� WRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��c��)WRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���b�� WRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��a��WRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��`��QWRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M����XRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����XRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� oXAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5XJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[XJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��� ��5XJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)����'�}WPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��~��WRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��}� oWAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���|��5WJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��{�[WJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���z��5WJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��y�iWJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��x��'WJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��w�� WJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��v��OWJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��u��+WBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��t��WBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��s��OWBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ���'sYPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�YPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9YDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}YPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]YRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����YRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����YRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � oYAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5YJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[YJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� �� �'sXPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V�� �'�XPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9XDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}XPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]XRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��0{OZJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��/{mZJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��.{�yZJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���-{� ZJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��,{�ZJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��+}YZDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��*}iZDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��){�ZJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���(� �ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��'m[ZTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��&m�ZDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��%iyZPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��$coZDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���#c�?ZDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���"� �ZFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��!m{ZDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r�� c�ZDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e�� uYZHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^�� uKZHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret�� mZDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� �� m�)ZDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cIZDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� ZDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��a�+ZBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��y ZDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!ZDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��ycZDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G���'�gYPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���L�+ZJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��K�oZPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��JOZJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���I� ZJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��HqZJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���G�-ZJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��F}?ZDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��E�ZJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��D�IZJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��C� ZJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��BgZJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��A�ZJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��@qZJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��?UZJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��>UZJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��=KeZJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��<qZJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��;uZJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��:K�/ZJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��9�uZVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��8K� ZJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��7K}ZJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��6K�;ZJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��5K�ZJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��4K�!ZJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��3{� ZJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���2{�ZJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��1{�ZJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��[��WZRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��Z��9ZRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���Y�� ZRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��X��aZRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���W�� ZRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��V��9ZRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��U�� ZRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���T}�ZJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��S��eZRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���R��#ZRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���Q��+ZRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��P�yZRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��O��ZRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��N��EZRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��M�UZJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���n��ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��m�� ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��l��#ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���k��ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��j��ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���i�� ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��h��?ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��g��1ZRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���f��3ZRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��e��aZRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��d�AZRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��c��WZRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���b��'ZRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��a�ZRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���`�� ZRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��_��)ZRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���^�� ZRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��]��ZRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��\��QZRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M����[Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M�� ��[Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o[Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���~��5[Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��}�[[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���|��5[Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���{�'�}ZPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��z��ZRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��y� oZAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���x��5ZJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��w�[ZJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���v��5ZJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��u�iZJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��t��'ZJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��s�� ZJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��r��OZJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��q��+ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��p��ZBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��o��OZBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ���'s\Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�\Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9\Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021��� �'�}\Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1�� ��]\Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�� ��\Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M�� ��\Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � o\Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5\Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[\Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ���'s[Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�[Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9[Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}[Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����][Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��,{O]Josh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��+{m]Josh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��*{�y]Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���){� ]Josh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��({�]Josh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��'}Y]Dave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��&}i]Dave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��%{�]Josh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���$� �]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��#m[]Tom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��"m�]David Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��!iy]Peter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg�� co]Dave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.��� c�?]Dave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore��� � �]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr�� m{]David Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r�� c�]Dave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uY]Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uK]Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��m]David Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��m�)]David Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cI]Dave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� ]Dave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��a�+]Ben Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��y ]David Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!]David Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��yc]David Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G���'�g\Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���H�+]Jarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��G�o]Prarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��FO]Jarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���E� ]Jarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��Dq]Jarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���C�-]Jarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��B}?]Daniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��A�]Jarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��@�I]Jarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��?� ]Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��>g]Jarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��=�]Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��<q]Jarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��;U]Jarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��:U]Josh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��9Ke]Josh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��8q]Josh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��7u]Josh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��6K�/]Josh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��5�u]Ville Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��4K� ]Josh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��3K}]Josh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��2K�;]Josh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��1K�]Josh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��0K�!]Josh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��/{� ]Josh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���.{�]Josh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��-{�]Josh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��W��W]Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��V��9]Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���U�� ]Rafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��T��a]Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���S�� ]Rafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��R��9]Rafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��Q�� ]Rafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���P}�]Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��O��e]Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���N��#]Rafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���M��+]Rafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��L�y]Rafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��K��]Rafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��J��E]Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��I�U]Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���j��]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��i�� ]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��h��#]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���g��]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��f��]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���e�� ]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��d��?]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��c��1]Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���b��3]Rafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��a��a]Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��`�A]Rafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��_��W]Rafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���^��']Rafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��]�]Rafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���\�� ]Rafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��[��)]Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���Z�� ]Rafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��Y��]Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��X��Q]Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��}��^Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��|��^Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��{� o^Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���z��5^Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��y�[^Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���x��5^Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���w�'�}]Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��v��]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��u� o]Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���t��5]Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��s�[]Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���r��5]Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��q�i]Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��p��']Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��o�� ]Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��n��O]Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��m��+]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��l��]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��k��O]Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � �� �'s_Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V�� �'�_Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`�� ��9_Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021��� �'�}_Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]_Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����_Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����_Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o_Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5_Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[_Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ���'s^Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�^Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`�� ��9^Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}^Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��~��]^Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��({O`Josh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��'{m`Josh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��&{�y`Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���%{� `Josh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��${�`Josh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��#}Y`Dave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��"}i`Dave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��!{�`Josh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937��� � �`Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb�� m[`Tom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex�� m�`David Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o�� iy`Peter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg�� co`Dave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?`Dave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �`Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��m{`David Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��c�`Dave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uY`Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uK`Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��m`David Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��m�)`David Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cI`Dave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� `Dave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��a�+`Ben Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��y `David Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!`David Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��yc`David Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G�� �'�g_Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���D�+`Jarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��C�o`Prarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��BO`Jarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���A� `Jarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��@q`Jarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���?�-`Jarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��>}?`Daniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��=�`Jarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��<�I`Jarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��;� `Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��:g`Jarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��9�`Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��8q`Jarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��7U`Jarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��6U`Josh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��5Ke`Josh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��4q`Josh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��3u`Josh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��2K�/`Josh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��1�u`Ville Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��0K� `Josh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��/K}`Josh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��.K�;`Josh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��-K�`Josh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��,K�!`Josh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��+{� `Josh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���*{�`Josh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��){�`Josh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��S��W`Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��R��9`Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���Q�� `Rafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��P��a`Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���O�� `Rafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��N��9`Rafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��M�� `Rafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���L}�`Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��K��e`Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���J��#`Rafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���I��+`Rafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��H�y`Rafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��G��`Rafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��F��E`Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��E�U`Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���f��`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��e�� `Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��d��#`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���c��`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��b��`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���a�� `Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��`��?`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��_��1`Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���^��3`Rafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��]��a`Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��\�A`Rafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��[��W`Rafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���Z��'`Rafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��Y�`Rafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���X�� `Rafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��W��)`Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���V�� `Rafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��U��`Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��T��Q`Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��y��aRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��x��aRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��w� oaAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���v��5aJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��u�[aJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���t��5aJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���s�'�}`Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��r��`Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��q� o`Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���p��5`Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��o�[`Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���n��5`Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��m�i`Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��l��'`Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��k�� `Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��j��O`Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��i��+`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��h��`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��g��O`Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ���'sbPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�bPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9bDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}bPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1����]bRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����bRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M����bRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� obAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5bJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[bJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��~�'saPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��}�'�aPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��|��9aDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���{�'�}aPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��z��]aRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��${OcJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��#{mcJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��"{�ycJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���!{� cJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~�� {�cJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei�� }YcDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq�� }icDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware�� {�cJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937��� � �cFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[cTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�cDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��iycPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��cocDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?cDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �cFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��m{cDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��c�cDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uYcHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uKcHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��mcDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��m�)cDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cIcDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� cDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E�� a�+cBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I�� y cDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� �� y�!cDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l�� yccDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G�� �'�gbPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���@�+cJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��?�ocPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��>OcJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���=� cJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��<qcJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���;�-cJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��:}?cDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��9�cJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��8�IcJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��7� cJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��6gcJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��5�cJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��4qcJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��3UcJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��2UcJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��1KecJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��0qcJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��/ucJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��.K�/cJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��-�ucVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��,K� cJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��+K}cJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��*K�;cJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��)K�cJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��(K�!cJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��'{� cJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���&{�cJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��%{�cJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��O��WcRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��N��9cRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���M�� cRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��L��acRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���K�� cRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��J��9cRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��I�� cRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���H}�cJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��G��ecRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���F��#cRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���E��+cRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��D�ycRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��C��cRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��B��EcRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��A�UcJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���b��cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��a�� cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��`��#cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���_��cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��^��cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���]�� cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��\��?cBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��[��1cRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���Z��3cRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��Y��acRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��X�AcRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��W��WcRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���V��'cRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��U�cRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���T�� cRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��S��)cRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���R�� cRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��Q��cRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��P��QcRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��u��dRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��t��dRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��s� odAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���r��5dJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��q�[dJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���p��5dJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���o�'�}cPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��n��cRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��m� ocAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���l��5cJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��k�[cJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���j��5cJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��i�icJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��h��'cJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��g�� cJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��f��OcJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��e��+cBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��d��cBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��c��OcBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ���'sePavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�ePavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`����9eDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021����'�}ePavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1�� ��]eRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����eRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��~��eRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��}� oeAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���|��5eJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��{�[eJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��z�'sdPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��y�'�dPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��x��9dDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���w�'�}dPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��v��]dRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c�� {OfJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir�� {mfJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9�� {�yfJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)��� {� fJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~�� {�fJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YfDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}ifDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��{�fJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���� �fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[fTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�fDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��iyfPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��cofDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?fDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��m{fDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��c�fDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uYfHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uKfHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret�� mfDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� �� m�)fDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T�� cIfDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw�� c� fDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E�� a�+fBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��y fDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!fDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��ycfDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G���'�gePavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���<�+fJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��;�ofPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��:OfJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���9� fJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��8qfJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���7�-fJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��6}?fDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��5�fJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��4�IfJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��3� fJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��2gfJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��1�fJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��0qfJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��/UfJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��.UfJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��-KefJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��,qfJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��+ufJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��*K�/fJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��)�ufVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��(K� fJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��'K}fJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��&K�;fJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��%K�fJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��$K�!fJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��#{� fJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���"{�fJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��!{�fJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��K��WfRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��J��9fRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���I�� fRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��H��afRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���G�� fRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��F��9fRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��E�� fRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���D}�fJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��C��efRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���B��#fRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���A��+fRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��@�yfRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��?��fRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��>��EfRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��=�UfJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���^��fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��]�� fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��\��#fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���[��fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��Z��fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���Y�� fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��X��?fBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��W��1fRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���V��3fRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��U��afRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��T�AfRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��S��WfRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���R��'fRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��Q�fRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���P�� fRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��O��)fRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���N�� fRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��M��fRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��L��QfRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��q��gRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��p��gRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��o� ogAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���n��5gJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��m�[gJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���l��5gJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���k�'�}fPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��j��fRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��i� ofAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���h��5fJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��g�[fJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���f��5fJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��e�ifJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��d��'fJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��c�� fJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��b��OfJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��a��+fBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��`��fBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��_��OfBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � �� �'shPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V���'�hPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��~��9hDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���}�'�}hPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��|��]hRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��{��hRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��z��hRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��y� ohAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���x��5hJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��w�[hJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��v�'sgPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��u�'�gPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��t��9gDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���s�'�}gPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��r��]gRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c�� {OiJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{miJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�yiJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���{� iJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��{�iJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YiDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}iiDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��{�iJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���� �iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[iTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�iDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��iyiPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��coiDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?iDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr�� m{iDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r�� c�iDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e�� uYiHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^�� uKiHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret�� miDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��m�)iDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cIiDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� iDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��a�+iBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��y iDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!iDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��yciDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G���'�ghPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD� � 8e7ca61739a1d3f544190c7c309edc46751bf2f44dff5310fee87c4cb7bb6adaD� � 417c8a14898a87f915ae527e263bac47d96d64b78b641b1dead153e90922a600D� � 34c423711d5bee58bc6d461bda15e8ea62dd49e4446449df46cd00915faf8d18D� � 35d356d55ebafa903003b49aeb13b35edc67264a8476fb922e09a49c3a4c3d11D� � e5a0d32e89a3648c510cd6416815046e280ea05a05bf43de7fbfaa6e27455758D� � deb31142ab7e8603a68a610a8422cfb7033ce8bd6d9f891957d353c1833ed4bfD� � 03d7845eba76fe247928549379f6ae14db9d90827e8439d756f0988bcf20353cD� � 75db6f02a6449b8494c92b72252d7c419bdb42257d1d8b7f32571a3b16eb642dD� � a9b57094feb64ccd6954d34a9eae41b1ce7251eb0e383460154e29c591f9edbbD� � 776a4bffa65d00c846682c7631699fa781fad10a947ccc64638902bb9dbcd4bbD� � 30da08d5520dc72f6af8b1f31f43ef8ac962713db1261bdf899023213b32778fD� � 6bd26d8f55e734a44a49c0d567e75fd2e01fb0416dc41657e6706a0cc536dcf9D� � 74dc4920cddb68c8f2fb72125f9c4fe417d8eb2458886e2b3cf57d9eaad44b18D� � 7b6a37b83b6701aa860040c927dd7a3ca996b88fc3968179524b74defc36b86fD� � 2d6cbd2b6c933682ae36f407d90ce54ebb13fa926b6254a299dfb8ed5e3ab50dD� � 6984c32519be294f3972d6867cb3f79b5a9fd8b0c4d39c382c2b90a908cf1edbD� � 7304832756d720e52ce03d4dfe113ed4e822f49024db082b0538743dcd77e0ccD� � 6b5aec6c27bbdb8e8246de5a0e7feee85330f57d543c2b48a78a92cdde69226fD� � 5038aa069c598c938107afc01a92c8628dfa142780cf2378c6a794336f5f36c8D� � 9f5fae3a3e99a7b4d3ceb25bee6f96521b6d7bc8dc020a6deac40581c1eb1e03D� � d097d5c4f6fa0a8b388c724399a8b5778dec0692f403eb70442110d15fe9cb96D� � 1b39ec6d025f842d8d6625e7dabd16b9c099d274901785bbd4a44b4688c78555D� � 1c3edaa51e7f36def4b59768dc08e2063eafa9f044084e7802eef198b4cfd6aaD� � 20ae362c85a55737b0c4f696d3ee1d35bde78cb9fa9c73d448a471a768ab060dD� � 9bdfa69721e12b60e16391a5f24fe5b828a1c409746f3912f37d13d52455b5aaD� � 1a0e7f6b9a624bed7a6c97cdd314ca74666588dc05b4c0f36cb6e083f886de19D� � 635b17d506cf981bb5da115d91ee0fba8bd52d64409035ee3fd6ca093de57de3D� � d71c698422aad6430412ea5ad2331289bae1a89835c12d572ffd3f716a7cdecfD� � e43dd891ba810f449f76998478458fe5465e12095b58893d8d2c53e58afc2dccD� � d67ae955cd3d959149c4e332ee6d18772a1c8731ffe867d3c29217d1c28f64ceD� � 1ae0aed9821871475b4ad62557315184118d67b15fa83bcbe955630e4862d6fbD� � 638fc8bb9909908e62bc3eb80961482638a5312540ad810352ca2188efdddd34D� � 94b4f82646e76d7d03c6774eaa862270d21493fd99c08a4d8cfdab17f215e227D� � b9eef202b9237c7ff1aa1031f3418e18dec8fcb7d24aa1c8fb36cffb063b13acD�~ � b9e3c546e24926211d5a5aa5d95ef7810829801015e9b54719851b90b83d3df5D�} � d4dfd922dc7b34dff910293b473957c59385f83da3b2d7300ab5b10b9c9625c1D�| � 50d8bf9871457acc74aa6b8eca22f280570ceb71ca5325b958cdf3b956b9fd2aD�{ � 5987f2a30bce773e5d05064002bc14ac9b05505bf08e0b65159ac565f3665a0eD�z � 32d670fd74bb0ad74086b25ce1884cd060700a72b558a70ea1bb987f9a766a5cD�y � 2eabacee4bda0e018077c135f6800ee2fa2e2c1a00e9d66fae50f375944baf8bD�x � 34f12ac598a013b7202d645ea34d6aad64d38c4b0ae7b1e397b4bf975bd01936D�w � 0138971c7f404ac5eacf3199a22a9b6f56bba8e4d9b1a0a0770fbba0c35cd8c1D�v � a3b2979c299da310626c7a91f0c2a8a6240b13371f30be8f59752f1eb1745d56D�u � 5ef17df0d56ecff6a56e1ae3afe967aefd90748eade713eb8f1df79e0178ffacD�t � 75e3a39cb350f1cb3b86e12ee249188f9abeebe3dc8928f271035782026bf083D�s � 52507767976870f9e980083a473db344b7d5e52dc3903b354428ab4519750ddaD�r � 2219182e1fb870952a988852ebd2cd210144aec2e15c38cdc233e4a048fab0deD�q � f9f3aa6691aa76433268554100f833ba115de8dd4c04d5c3c6e45df266f8fc0bD�p � c942c7007600277e35f7fe0ec5665cd6b5fc003d7885be7fd7f0433de9d7a24dD�o � 5806fab64ea65328628aca0337b72c4d8c48b5e65aa711896df147932fa943cdD�n � 66bdcd352dbf0dad246b6427f4b268349416615b9de642042f444773128044f3D�m � 60de43ad9647ff793bfac887b15848ac456337fa0fc398afff1c1ce2aaa5f8dbD�l � f9dea6adb93f445169de9528bc4e042195698ef83a1a0da76c1df5b0623899f3D�k � 279ca7f090e4097ac32590b4d4d3294605aec2973f95970bc5a10ea0028b8863D�j � 154c6082e27f30f843391bac1294ec4e71a35416e9896ebb4d0e77768ca02179D�i � f06f45191211426ab88d136ff4745c3034cccc5da48fdf806a1bac75334383ac w ~�a � t � G � N � R � ~ �,i�,�������w ���8�+iJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��7�oiPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��6OiJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���5� iJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��4qiJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���3�-iJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��2}?iDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��1�iJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��0�IiJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��/� iJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��.giJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��-�iJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��,qiJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��+UiJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��*UiJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��)KeiJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��(qiJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��'uiJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��&K�/iJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��%�uiVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��$K� iJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��#K}iJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��"K�;iJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��!K�iJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u�� K�!iJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� �� {� iJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)��� {�iJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~�� {�iJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��G��WiRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��F��9iRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���E�� iRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��D��aiRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���C�� iRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��B��9iRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��A�� iRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���@}�iJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��?��eiRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���>��#iRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���=��+iRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��<�yiRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��;��iRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��:��EiRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��9�UiJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���Z��iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��Y�� iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��X��#iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���W��iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��V��iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���U�� iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��T��?iBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��S��1iRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���R��3iRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��Q��aiRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��P�AiRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��O��WiRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���N��'iRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��M�iRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���L�� iRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��K��)iRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���J�� iRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��I��iRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��H��QiRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��m��jRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��l��jRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��k� ojAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���j��5jJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��i�[jJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���h��5jJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���g�'�}iPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��f��iRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��e� oiAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���d��5iJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��c�[iJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���b��5iJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��a�iiJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��`��'iJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��_�� iJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��^��OiJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��]��+iBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��\��iBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��[��OiBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��|�'skPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��{�'�kPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��z��9kDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���y�'�}kPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��x��]kRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��w��kRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��v��kRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��u� okAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���t��5kJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��s�[kJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��r�'sjPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��q�'�jPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��p��9jDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���o�'�}jPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��n��]jRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��{OlJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{mlJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�ylJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���{� lJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��{�lJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YlDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}ilDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��{�lJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���� �lFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[lTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�lDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o�� iylPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg�� colDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.��� c�?lDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore��� � �lFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr�� m{lDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��c�lDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uYlHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uKlHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��mlDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��m�)lDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cIlDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��c� lDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��a�+lBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I�� y lDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��y�!lDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��~yclDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��}�'�gkPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���4�+lJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��3�olPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��2OlJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���1� lJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��0qlJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���/�-lJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��.}?lDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��-�lJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��,�IlJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��+� lJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��*glJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��)�lJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��(qlJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��'UlJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��&UlJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��%KelJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��$qlJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��#ulJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��"K�/lJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}��!�ulVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t�� K� lJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b�� K}lJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B�� K�;lJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p�� K�lJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u�� K�!lJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� lJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�lJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��{�lJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��C��WlRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��B��9lRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���A�� lRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��@��alRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���?�� lRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��>��9lRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��=�� lRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���<}�lJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��;��elRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���:��#lRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���9��+lRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��8�ylRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��7��lRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��6��ElRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��5�UlJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���V��lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��U�� lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��T��#lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���S��lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��R��lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���Q�� lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��P��?lBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��O��1lRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���N��3lRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��M��alRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��L�AlRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��K��WlRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���J��'lRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��I�lRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���H�� lRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��G��)lRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���F�� lRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��E��lRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��D��QlRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��i��mRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��h��mRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��g� omAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���f��5mJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��e�[mJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���d��5mJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���c�'�}lPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��b��lRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��a� olAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���`��5lJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��_�[lJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���^��5lJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��]�ilJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��\��'lJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��[�� lJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��Z��OlJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��Y��+lBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��X��lBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��W��OlBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��x�'snPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��w�'�nPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��v��9nDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���u�'�}nPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��t��]nRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��s��nRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��r��nRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��q� onAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���p��5nJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��o�[nJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��n�'smPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��m�'�mPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��l��9mDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���k�'�}mPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��j��]mRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��{OoJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{moJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�yoJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���{� oJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��{�oJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YoDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}ioDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware�� {�oJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937��� � �oFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb�� m[oTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex�� m�oDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o�� iyoPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��cooDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?oDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �oFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��m{oDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��c�oDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uYoHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��uKoHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��moDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� �� m�)oDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��cIoDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��~c� oDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��}a�+oBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��|y oDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��{y�!oDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��zycoDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��y�'�gnPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���0�+oJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��/�ooPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��.OoJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���-� oJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��,qoJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���+�-oJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��*}?oDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��)�oJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��(�IoJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��'� oJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��&goJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��%�oJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��$qoJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��#UoJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��"UoJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��!KeoJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v�� qoJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x�� uoJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|�� K�/oJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}�� �uoVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t�� K� oJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��K}oJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��K�;oJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��K�oJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��K�!oJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� oJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�oJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��{�oJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��?��WoRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��>��9oRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���=�� oRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��<��aoRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���;�� oRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��:��9oRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��9�� oRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���8}�oJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��7��eoRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���6��#oRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���5��+oRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��4�yoRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��3��oRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��2��EoRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��1�UoJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���R��oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��Q�� oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��P��#oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���O��oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��N��oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���M�� oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��L��?oBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��K��1oRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���J��3oRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��I��aoRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��H�AoRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��G��WoRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���F��'oRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��E�oRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���D�� oRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��C��)oRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���B�� oRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��A��oRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��@��QoRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��e��pRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��d��pRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��c� opAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���b��5pJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��a�[pJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���`��5pJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���_�'�}oPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��^��oRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��]� ooAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���\��5oJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�[oJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���Z��5oJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��Y�ioJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��X��'oJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��W�� oJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��V��OoJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��U��+oBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��T��oBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��S��OoBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��t�'sqPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��s�'�qPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��r��9qDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���q�'�}qPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��p��]qRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��o��qRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��n��qRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��m� oqAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���l��5qJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��k�[qJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��j�'spPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��i�'�pPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��h��9pDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���g�'�}pPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��f��]pRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��{OrJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{mrJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�yrJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)��� {� rJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~�� {�rJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei�� }YrDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq�� }irDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware�� {�rJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���� �rFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[rTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�rDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��iyrPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��corDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?rDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���� �rFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��m{rDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r�� c�rDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��uYrHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��~uKrHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��}mrDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��|m�)rDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��{cIrDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��zc� rDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��ya�+rBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��xy rDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��wy�!rDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��vycrDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��u�'�gqPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���,�+rJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��+�orPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��*OrJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���)� rJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��(qrJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���'�-rJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��&}?rDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��%�rJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#��$�IrJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��#� rJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��"grJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>��!�rJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev�� qrJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih�� UrJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh�� UrJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV�� KerJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v�� qrJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��urJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��K�/rJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}���urVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��K� rJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��K}rJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��K�;rJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��K�rJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��K�!rJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� rJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�rJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��{�rJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��;��WrRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��:��9rRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���9�� rRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��8��arRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���7�� rRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��6��9rRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��5�� rRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���4}�rJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��3��erRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���2��#rRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���1��+rRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��0�yrRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��/��rRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��.��ErRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��-�UrJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���N��rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��M�� rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��L��#rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���K��rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��J��rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���I�� rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��H��?rBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��G��1rRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���F��3rRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��E��arRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��D�ArRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��C��WrRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���B��'rRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��A�rRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���@�� rRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��?��)rRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���>�� rRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��=��rRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��<��QrRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��a��sRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��`��sRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��_� osAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���^��5sJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��]�[sJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���\��5sJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���[�'�}rPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��Z��rRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��Y� orAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���X��5rJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��W�[rJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���V��5rJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��U�irJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��T��'rJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��S�� rJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��R��OrJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��Q��+rBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��P��rBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��O��OrBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��p�'stPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��o�'�tPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��n��9tDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���m�'�}tPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��l��]tRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��k��tRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��j��tRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��i� otAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���h��5tJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��g�[tJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��f�'ssPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��e�'�sPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��d��9sDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���c�'�}sPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��b��]sRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c�� {OuJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir�� {muJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9�� {�yuJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)��� {� uJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��{�uJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YuDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}iuDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��{�uJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���� �uFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[uTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��m�uDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��iyuPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg�� couDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���c�?uDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���~� �uFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��}m{uDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��|c�uDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��{uYuHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��zuKuHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��ymuDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��xm�)uDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��wcIuDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��vc� uDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��ua�+uBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��ty uDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��sy�!uDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��rycuDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��q�'�gtPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���(�+uJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��'�ouPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��&OuJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���%� uJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��$quJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)���#�-uJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��"}?uDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ��!�uJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#�� �IuJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C�� � uJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq�� guJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>�� �uJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev�� quJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��UuJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��UuJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��KeuJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��quJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��uuJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��K�/uJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}���uuVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��K� uJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��K}uJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��K�;uJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��K�uJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��K�!uJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� uJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�uJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~�� {�uJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��7��WuRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��6��9uRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���5�� uRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��4��auRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���3�� uRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��2��9uRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��1�� uRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���0}�uJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��/��euRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���.��#uRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���-��+uRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��,�yuRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��+��uRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��*��EuRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��)�UuJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���J��uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��I�� uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��H��#uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���G��uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��F��uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���E�� uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��D��?uBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��C��1uRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���B��3uRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��A��auRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��@�AuRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��?��WuRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���>��'uRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��=�uRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���<�� uRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��;��)uRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���:�� uRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��9��uRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��8��QuRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��]��vRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��\��vRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��[� ovAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���Z��5vJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��Y�[vJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���X��5vJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���W�'�}uPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��V��uRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��U� ouAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���T��5uJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��S�[uJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���R��5uJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��Q�iuJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��P��'uJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��O�� uJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��N��OuJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��M��+uBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��L��uBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��K��OuBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��l�'swPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��k�'�wPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��j��9wDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���i�'�}wPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��h��]wRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��g��wRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��f��wRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��e� owAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���d��5wJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��c�[wJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��b�'svPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��a�'�vPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��`��9vDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���_�'�}vPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��^��]vRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��{OxJosh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{mxJosh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�yxJosh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���{� xJosh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��{�xJosh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}YxDave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��}ixDave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��{�xJosh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937��� � �xFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��m[xTom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��~m�xDavid Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��}iyxPeter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��|coxDave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���{c�?xDave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���z� �xFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��ym{xDavid Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��xc�xDave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��wuYxHicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��vuKxHicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��umxDavid Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��tm�)xDavid Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��scIxDave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��rc� xDave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��qa�+xBen Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��py xDavid Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��oy�!xDavid Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��nycxDavid Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��m�'�gwPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ���$�+xJarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z��#�oxPrarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��"OxJarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���!� xJarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v�� qxJarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)��� �-xJarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\�� }?xDaniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� �� �xJarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#�� �IxJarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��� xJarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��gxJarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>���xJarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��qxJarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��UxJarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��UxJosh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��KexJosh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��qxJosh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��uxJosh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��K�/xJosh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}���uxVille Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��K� xJosh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��K}xJosh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��K�;xJosh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p�� K�xJosh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u�� K�!xJosh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� �� {� xJosh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)��� {�xJosh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~�� {�xJosh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��3��WxRafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��2��9xRafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���1�� xRafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��0��axRafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���/�� xRafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��.��9xRafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��-�� xRafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���,}�xJarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��+��exRafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���*��#xRafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���)��+xRafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��(�yxRafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��'��xRafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��&��ExRafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��%�UxJarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���F��xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��E�� xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��D��#xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���C��xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��B��xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���A�� xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��@��?xBruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��?��1xRafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���>��3xRafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��=��axRafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��<�AxRafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��;��WxRafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���:��'xRafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��9�xRafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���8�� xRafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��7��)xRafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���6�� xRafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��5��xRafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��4��QxRafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��Y��yRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��X��yRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��W� oyAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���V��5yJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��U�[yJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���T��5yJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���S�'�}xPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��R��xRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��Q� oxAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���P��5xJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��O�[xJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���N��5xJan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��M�ixJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��L��'xJan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��K�� xJan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��J��OxJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��I��+xBruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��H��xBruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��G��OxBruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��h�'szPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��g�'�zPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��f��9zDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���e�'�}zPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��d��]zRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��c��zRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��b��zRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��a� ozAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���`��5zJan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��_�[zJan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��^�'syPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��]�'�yPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��\��9yDenys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���[�'�}yPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��Z��]yRado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c��{O{Josh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{m{Josh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��{�y{Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���{� {Josh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~�� {�{Josh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��}Y{Dave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��~}i{Dave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��}{�{Josh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���|� �{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��{m[{Tom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��zm�{David Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��yiy{Peter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��xco{Dave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���wc�?{Dave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���v� �{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��um{{David Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��tc�{Dave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��suY{Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��ruK{Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��qm{David Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��pm�){David Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��ocI{Dave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��nc� {Dave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��ma�+{Ben Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��ly {David Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��ky�!{David Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��jyc{David Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��i�'�gzPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 �% 0������������������{tmf_XQJC<5.' ������������������xjc\UNG@92+$ � � � � � � � � � � � � � � � � � � | u n g ` Y R K D = 6 / ( ! � � � � S L E > 7 0 ) " � � � � � � � � � � � � � � � � � � � z s l e ^ W P I B ; 4 - & � � � � � � � � � � � � � � � � � � ~ w p i b [ T M F ? 8 1 * # ������������������{tmf_XQJC<5.' ������������������xqjc\UNG@92+$ ������������������|ung`YRKD=6/(! �������������������yrkd]VOHA:3,% � � � � � � � � � � � � � � � y r k d ] V O H A : 3 , % � � � � � � � � � � � � � � � � � � } v o h a Zq ������������������}vohaZSLE>70)" ��������������� � ��� � �h �G �. �% 탊 색| 냉j ꃉZ 郉K 胉9 烉% 惉 僈 䃈q トb U > �/ ߃� ރ� ݃�x ܃�e ۃ�S ڃ�A ك�+ � ׃� փ�o Ճ�Y ԃ�; Ӄ� ҃� у� Ѓ�} σ�t �k ̓�c ̃�Y ˃�J ʃ�8 Ƀ�( ȃ� ǃ� ƃ�s Ń�` ă�M Ã�? �0 ���# ��� ���} ���l ���Y ���F ���3 ���! ��� ���y ���g ���T ���? ���* ��� ���o ���] ���S ���D ���2 ���" ��� ��� ���m ���Z ���G ���9 ���* ��� ��� ���w ���f ���S ���@ ���- ��� ��� ���s ���a ���N ���7 ���! ��� ���f ���V ���N ���E ���< ���3 ���+ ���! ��� ��� ���p ���a ���O ���; ���( ��� ��� ���w ���g ���Q ���B ���1 ��� �� ~��y }��f |��S {��> z��, y�� x�� w��l v��M u��/ t��! s�� r�� q��t p��e o��U n��A m��. l�� k�� j��y i��k h��U g��F f��5 e��# d�� c��} b��j a��X `��B _��/ ^�� ]�� \��q [��V Z��6 Y�� X�� W��r V��` U��Q T��> S��+ R�� Q�� P��d O��U N��B M��/ L�� J�� I��h H��Y G��F F��3 E��$ D�� C��l B��] A��J @��7 ?��( >�� =��p <��a ;��N :��; 9��, 8�� 7��t 6��e 5��R 4��? 3��0 2�� 1��x 0��i /��V .��C -��4 ,�� +��| *��m )��Z (��G '��8 %�� $�� #��q "��^ !��K ��< �� �� ��u ��b ��O ��@ ��$ �� ��y ��f ��S ��D ��( �� ��} .��* -�� ,��u +��W *��I )��= (��) '�� &�� %��x $��d #��Q "��= !��, �� �� ��z ��k ��Z ��G ��4 ��" �� ��} ��h ��S ��A ��- �� ��{ ��[ ��H ��? ��6 ��- ��# �� �� ��q ��a ��M ��: ��% �� �� ��w ��a ���R ���A ���/ ��� ��� ���x ���f ���R ���> ���, ��j ��W ��H ��, �� �� ��n ��[ ��L ��0 �� �� ��r ��_ ��P ��4 �� ��� ���v ���c ���T ���8 ��� ��� ���z ���g ���X ���: �� �� �� ��u ��h ��W ��F ��. �� �� ��w ��W ��7 �� �� ��w ��a ��O ��? ��! ��~ ߂�^ ނ�H ݂�5 ܂� ۂ� ڂ�| ق�_ /��A �= ׂ� ւ� Ղ�z Ԃ�k ӂ�_ ҂�Q т�? Ђ�+ ς� � ͂�r ̂�T ˂�2 ʂ� ɂ�{ Ȃ�i ǂ�R Ƃ�? ł�0 Ă� Â�r �R ���8 ���' ��� ���} ���p ���P ���1 ��� ���u ���i ���\ ���M ���@ ���/ ��� ��� ���t ���k ���O ���/ ��� ���q ���c ���O ���9 ���' ��� ���y ���V ���6 ��� ��� ���w w ~�a � t � G � N � R � ~ �,i�,�������w ��� �+{Jarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z�� �o{Prarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e�� O{Jarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)��� � {Jarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v�� q{Jarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)����-{Jarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��}?{Daniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ���{Jarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#���I{Jarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��� {Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��g{Jarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>���{Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��q{Jarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��U{Jarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��U{Josh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV��Ke{Josh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v��q{Josh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x��u{Josh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|��K�/{Josh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}�� �u{Ville Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t�� K� {Josh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b�� K}{Josh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B�� K�;{Josh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p�� K�{Josh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��K�!{Josh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� {Josh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�{Josh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��{�{Josh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��/��W{Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��.��9{Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���-�� {Rafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��,��a{Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���+�� {Rafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��*��9{Rafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��)�� {Rafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���(}�{Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��'��e{Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���&��#{Rafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���%��+{Rafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|��$�y{Rafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� ��#��{Rafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c��"��E{Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)��!�U{Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���B��{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��A�� {Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��@��#{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���?��{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��>��{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���=�� {Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��<��?{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��;��1{Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���:��3{Rafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��9��a{Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��8�A{Rafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��7��W{Rafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���6��'{Rafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��5�{Rafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���4�� {Rafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��3��){Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���2�� {Rafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��1��{Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��0��Q{Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��U��|Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��T��|Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��S� o|Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���R��5|Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��Q�[|Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���P��5|Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���O�'�}{Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��N��{Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��M� o{Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���L��5{Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��K�[{Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���J��5{Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��I�i{Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��H��'{Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��G�� {Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��F��O{Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��E��+{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��D��{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��C��O{Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��d�'s}Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��c�'�}Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��b��9}Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���a�'�}}Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��`��]}Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��_��}Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��^��}Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��]� o}Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���\��5}Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�[}Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��Z�'s|Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��Y�'�|Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��X��9|Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���W�'�}|Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��V��]|Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � D � f � ! � : � `�� m�m�~z��� M � p c�� {O~Josh Boyer <jwboyer@redhat.com> 20120510-0.5.git375e954OЗ�- Bump release to get around kojir��{m~Josh Boyer <jwboyer@redhat.com> 20120510-0.4.git375e954OЗ�- Drop udev requires. Systemd now provides udev�9��~{�y~Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954O��- Fix location of BuildRequires so git is inclued in the buildroot - Create iwlXXXX-firmware subpackages (rhbz 828050)���}{� ~Josh Boyer <jwboyer@redhat.com> 20120510-0.1.git375e954O���- Update to latest upstream. Adds new bnx2x and radeon firmware~��|{�~Josh Boyer <jwboyer@redhat.com> 20120418-0.1.git85fbcaaO���- Update to latest upstream. Adds new rtl and ath firmwarei��{}Y~Dave Airlie <airlied@redhat.com> 20120206-0.3.git06c8f81Oi�- use git to apply the radeon firmwareq��z}i~Dave Airlie <airlied@redhat.com> 20120206-0.2.git06c8f81Oi�- add radeon southern islands/trinity firmware��y{�~Josh Boyer <jwboyer@redhat.com> 20120206-0.1.git06c8f81O1@- Update to latest upstream git snapshot. Fixes rhbz 786937���x� �~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110731-3O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuildb��wm[~Tom Callaway <spot@fedoraproject.org> 20110731-2N:��- resolve conflict with netxen-firmwarex��vm�~David Woodhouse <dwmw2@infradead.org> 20110731-1N98@- Latest firmware release with v1.3 ath9k firmware (#727702)o��uiy~Peter Lemenkov <lemenkov@gmail.com> 20110601-2M�o�- Remove duplicated licensing files from /lib/firmwareg��tco~Dave Airlie <airlied@redhat.com> 20110601-1M�)�- Latest firmware release with AMD llano support.���sc�?~Dave Airlie <airlied@redhat.com> 20110304-1Mx�@- update to latest upstream for radeon ni/cayman, drop nouveau fw we don't use it anymore���r� �~Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20110125-2MQ0@- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuildr��qm{~David Woodhouse <dwmw2@infradead.org> 20110125-1M>�@- Update to linux-firmware-20110125 (new bnx2 firmware)r��pc�~Dave Airlie <airlied@redhat.com> 20101221-1M' @- rebase to upstream release + add new radeon NI firmwares.e��ouY~Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-4Lc�A- Really obsolete ueagle-atm4-firmware^��nuK~Hicham HAOUARI <hicham.haouari@gmail.com> 20100806-3Lc�@- Obsolete ueagle-atm4-firmwaret��mm~David Woodhouse <dwmw2@infradead.org> 20100806-2L[�A- Remove duplicate radeon firmwares; they're upstream now� ��lm�)~David Woodhouse <dwmw2@infradead.org> 20100806-1L[�@- Update to linux-firmware-20100806 (more legacy firmwares from kernel source)T��kcI~Dave Airlie <airlied@redhat.com> 20100106-4K��- Add further radeon firmwaresw��jc� ~Dave Airlie <airlied@redhat.com> 20100106-3Kr��- add radeon RLC firmware - submitted upstream to dwmw2 already.�E��ia�+~Ben Skeggs <bskeggs@redhat.com> 20090106-2KqN@- Add firmware needed for nouveau to operate correctly (this is Fedora only - do not upstream yet - we just moved it here from Fedora kernel)I��hy ~David Woodhouse <David.Woodhouse@intel.com> 20090106-1KD{@- Update� ��gy�!~David Woodhouse <David.Woodhouse@intel.com> 20090821-1J��@- Update, fix typos, remove some files which conflict with other packages.l��fyc~David Woodhouse <David.Woodhouse@intel.com> 20090319-1I�3�- First standalone kernel-firmware package.�G��e�'�g}Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 w ~�a � t � G � N � R � ~ �,i�,�������w ��� �+~Jarod Wilson <jarod@redhat.com> - 20140804-0.1.git6bce2b0S�u�- Update to latest linux-firmware to pick up new Qlogic firmware (rhbz 1089364)z���o~Prarit Bhargava <prarit@redhat.com> - 20140213-0.3.git4164c23S0 @- Revert AMD firmware update again (rhbz 1079114)e��O~Jarod Wilson <jarod@redhat.com> - 20140213-0.2.git4164c23S ��- Restore amd-ucode (rhbz 866700)���� ~Jarod Wilson <jarod@redhat.com> - 20140213-0.1.git4164c23R���- Add bnx2x FW 7.8.19 to fix FCoE on 4-port cards (rhbz 1061351)v��q~Jarod Wilson <jarod@redhat.com> - 20140102-0.2.git52d77dbR��@- Fix Obsoletes for iwl100-firmware (rhbz 1035459)����-~Jarod Wilson <jarod@redhat.com> - 20140102-0.1.git52d77dbR�T�- Update to latest linux-firmware to pick up new Brocade firmware (rhbz 1030677)\��}?~Daniel Mach <dmach@redhat.com> - 20131106-0.4.git7d0c7a8R�k�- Mass rebuild 2013-12-27� ���~Jarod Wilson <jarod@redhat.com> - 20131106-0.3.git7d0c7a8R��- Add new fwdir define for /usr/lib/firmware and use it (rhbz 884107)�#���I~Jarod Wilson <jarod@redhat.com> - 20131106-0.2.git7d0c7a8R��@- Temporarily add old brocade firmwares to work with not-yet-updated bfa driver (rhbz 1030532)�C��� ~Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8Rz/@- Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426) - Fix up Obsoletes to all use <= comparisonsq��g~Jarod Wilson <jarod@redhat.com> - 20130820-0.4.git600caefR<8�- Drop amd-ucode to avoid bug 1007411 for now�>���~Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caefRZB- Put in proper URL and URL-less Source0 location, and a note about how we generate the tarball by hand from a git treev��q~Jarod Wilson <jarod@redhat.com> - 20130820-0.2.git600caefRZA- Fix up build breakage from split nvr for iwlwifih��U~Jarod Wilson <jarod@redhat.com> - 20130820-0.1.git600caefRZ@- Update to latest upstream git treeh��U~Josh Boyer <jwboyer@redhat.com> - 20130418-0.1.gitb584174Qo�@- Update to latest upstream git treeV�� Ke~Josh Boyer <jwboyer@redhat.com>QHS@- Own the firmware directories (rhbz 919249)v�� q~Josh Boyer <jwboyer@redhat.com> - 20130201-0.4.git65a5163Q& @- Obsolete netxen-firmware. Again. (rhbz 913680)x�� u~Josh Boyer <jwboyer@redhat.com> - 20130201-0.3.git65a5163Q��- Obsolete ql2[45]00-firmware packages (rhbz 906898)|�� K�/~Josh Boyer <jwboyer@redhat.com>Q �@- Update to latest upstream release - Provide firmware for carl9170 (rhbz 866051)}�� �u~Ville Skyttä <ville.skytta@iki.fi> - 20121218-0.2.gitbda53caP��- Own subdirs created in /lib/firmware (rhbz 902005)t��K� ~Josh Boyer <jwboyer@redhat.com>P��- Correctly obsolete the libertas-usb8388-firmware packages (rhbz 902265)b��K}~Josh Boyer <jwboyer@redhat.com>P�Z�- Update to latest upstream. Adds brcm firmware updates�B��K�;~Josh Boyer <jwboyer@redhat.com>Puc@- Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959) - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)p��K�~Josh Boyer <jwboyer@redhat.com>Pa��- Update to latest upstream. Adds marvell wifi updates (rhbz 858388)u��K�!~Josh Boyer <jwboyer@redhat.com>PXb@- Add patch to create libertas subpackages from Daniel Drake (rhbz 853198)� ��{� ~Josh Boyer <jwboyer@redhat.com> 20120720-0.2.git7560108PI�- Add epoch to iwl1000 subpackage to preserve upgrade patch (rhbz 855426)���{�~Josh Boyer <jwboyer@redhat.com> 20120720-0.1.git7560108P H@- Update to latest upstream. Adds more realtek firmware and bcm4334~��{�~Josh Boyer <jwboyer@redhat.com> 20120717-0.1.gitf1f86bbPS�- Update to latest upstream. Adds updated realtek firmware R � Z � ? � ��pe/�� �,��+��W~Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88X��- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1395322) - iwlwifi: Update to the latest firmware released version (rhbz 1385749) - ath10k: Update to the latest firmware released version (rhbz 1385743) - hfi1: Update to the latest firmware released version (rhbz 1382805)�]��*��9~Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19W�u@- Update to latest upstream linux-firmware image for assorted updates - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)���)�� ~Rafael Aquini <aquini@redhat.com> - 20160728-48.git0daeaf3W�:�- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)�1��(��a~Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3W��- Update to latest upstream linux-firmware image for assorted updates - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566) - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)���'�� ~Rafael Aquini <aquini@redhat.com> - 20160615-46.gita4bbc81WaC@- Update to latest upstream linux-firmware image for assorted updates - Nuke old cxgb4 firmware blobs tarball (rhbz 1336906) - Update to latest Chelsio firmware release version (rhbz 1336906)� ��&��9~Rafael Aquini <aquini@redhat.com> - 20160426-45.git986a5a8W X@- Update to latest upstream linux-firmware image for assorted updates - Restore AMD-ucode firmware blob again (rhbz 866700) - qat: Update to the latest upstream firmware (rhbz 1173792) - WiFi on Windstorm Peak Wireless Adapter 8265 - firmware support (rhbz 1315534) - WiFi on Sandy Peak Wireless Adapter 3168 - firmware support (rhbz 1315536)�O��%�� ~Rafael Aquini <aquini@redhat.com> - 20160223-44.git8d1fd61V�a�- Update to latest upstream linux-firmware image for assorted updates - Update Intel Omni-Path Architecture hfi1 Firmware (rhbz 1267015)���$}�~Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5U���- Add more old chelsio firmwares, they nuked the one the driver in RHEL7.2 is expecting from upstream (rhbz 1262128) - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)�3��#��e~Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5U�- Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910) - Update skl firmware for gpu (rhbz 1210012)���"��#~Rafael Aquini <aquini@redhat.com> - 20150727-41.git75cc3efU�5@- Declare obsolecence for (old) removed firmware subpackages (rhbz 1232315)���!��+~Rafael Aquini <aquini@redhat.com> - 20150727-40.git75cc3efU� @- Add firmware support for the "Snowfield Peak" wireless adapter (rhbz 1169604)|�� �y~Rafael Aquini <aquini@redhat.com> - 20150612-39.git3161bfaU�4@- Restore AMD-ucode firmware blob again (rhbz 1016168)� �� ��~Rafael Aquini <aquini@redhat.com> - 20150612-38.git3161bfaU���- Reintroduce upstream nuked cxgb4 firmware old blobs (rhbz 1189256)�c�� ��E~Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfaUz�- Update to latest upstream linux-firmware image for assorted updates - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256) - qat: Update to the latest upstream firmware (rhbz 1173792) - Use a common version number for both the iwl*-firmware packages and linux-firmware itself�)�� �U~Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80cT��- Update to latest upstream linux-firmware image for assorted updates - Adds Intel Quick Assist Technology firmware (rhbz 1127338) - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403) - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702) - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595) ; � u � � �C��Jl� �� � ; ���>��~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-69.git85c5d90[��@- liquidio: remove firmware that violates GPL license (rhbz 1637696)�M��=�� ~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180911-68.git85c5d90[��@- Update to latest upstream linux-firmware image for assorted updates - nvidia: update firmware for Pascal GPUs (rhbz 1625514)�Z��<��#~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180717-67.git8d69bab[M�@- Update to latest upstream linux-firmware image for assorted netdrv updates - chelsio: update firmware to revision 1.20.8.0 (rhbz 1523202)���;��~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-66.git7518922[0�@- Only update initrd when the package is being updated (rhbz 1584178)�J��:��~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180529-65.git7518922[ @�- Update to latest upstream linux-firmware image for assorted updates - amd: update microcode for family 15h (rhbz 1574575)���9�� ~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-64.git2a9b2cf[@- Add early initramfs update in case of AMD host (rhbz 1580584)�h��8��?~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20180518-63.git2a9b2cfZ��@- Update to latest upstream linux-firmware image for assorted netdrv updates - amd: add microcode for family 17h and update for family 15h (rhbz 1574575)�Y��7��1~Rafael Aquini <aquini@redhat.com> - 20180220-62.git6d51311Z� �- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263) - chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)���6��3~Rafael Aquini <aquini@redhat.com> - 20180113-61.git65b1c68Z]�@- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)�q��5��a~Rafael Aquini <aquini@redhat.com> - 20180113-60.git65b1c68ZY�- Update to latest upstream linux-firmware image for assorted updates - netr: Add Netronome TC flower firmware (rhbz 1518900) - Revert amd-ucode for fam17h (rhbz 1533945)`��4�A~Rafael Aquini <aquini@redhat.com> - 20171127-59.git17e6288ZL�- Add amd-ucode for fam17h�,��3��W~Rafael Aquini <aquini@redhat.com> - 20171127-58.git17e6288Z�@- Update to latest upstream linux-firmware image for assorted updates - iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709) - iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711) - iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166) - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417���2��'~Rafael Aquini <aquini@redhat.com> - 20171011-57.gitbf04291Y��- Update to latest upstream linux-firmware image for assorted updates - ath10k: Update to the latest firmware released version (rhbz 1457363) - opa: update Intel Omni-Path Architecture firmware (rhbz 1452785) - chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328) - qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)��1�~Rafael Aquini <aquini@redhat.com> - 20170606-56.gitc990aaeYP�@- opa: Revert switch firmware back to 0.47 (rhbz 1464629)���0�� ~Rafael Aquini <aquini@redhat.com> - 20170606-55.gitc990aaeY6�@- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)�U��/��)~Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15Y-^�- Update to latest upstream linux-firmware image for assorted updates - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)���.�� ~Rafael Aquini <aquini@redhat.com> - 20170328-53.git44d8e8dY$$@- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)�M��-��~Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8dX�P@- Update to latest upstream linux-firmware image for assorted updates - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)�)��,��Q~Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8X���- Update to latest upstream linux-firmware image for assorted updates - chelsio: Update to the latest firmware released version (rhbz 1385911) - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197) \ 5 � A�)���0� . \ �M��Q��Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��P��Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��O� oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���N��5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��M�[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���L��5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)���K�'�}~Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�M��J��~Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��I� o~Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���H��5~Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��G�[~Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���F��5~Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��E�i~Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��D��'~Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��C�� ~Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��B��O~Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��A��+~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��@��~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�p��?��O~Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190225-70.git80dee31\u*@- cxgb4: update firmware to revision 1.22.9.0 (rhbz 1671610) - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.13 (rhbz 1637996) - linux-firmware: Update firmware patch for Intel Bluetooth 8260 (rhbz 1649148) - qed: Add 8.37.7.0 firmware image (rhbz 1654809) - liquidio: fix GPL compliance issue (rhbz 1622521) - Update Intel OPA hfi1 firmware (rhbz 1637240) - qed: Add firmware 8.37.7.0 (rhbz 1643554) � J � � � b � Q� .x��!� � ��`�'s�Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��_�'��Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��^��9�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���]�'�}�Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��\��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��[���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250)�M��Z���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��Y� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���X��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��W�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)� ��V�'sPavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els1f~��- Repack the linux-firmware to keep tuxcare updates�V��U�'�Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els2ft�- Update iwlwifi firmware to mitigate CVE-2022-38076, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Dual Band Wireless-AC 3168, Intel Wireless 7265 (Rev D) Family, Intel Dual Band Wireless-AC 3165, Intel Dual Band Wireless-AC 8265, Intel Dual Band Wireless-AC 8260, Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260�`��T��9Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021���S�'�}Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-81.git78c0348.tuxcare.els1e�B�- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11 - Update AMD CPU microcode for processor family 17h: sig 0x00830f10 - Fix CVE-2023-20569, CVE-2023-20593 - Use tuxcare.els suffixes for all packages�1��R��]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985) p � H � � � ) L�k�}�l� Mp �X��rk�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9��qk� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6��pk��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��oc?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��nc?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��mki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)� ��l��'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden��ke{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x��je� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)��ie��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y��he�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above�X��gk�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9��fk� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6��ek��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��dc?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��cc?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��bki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)�G��a�'�g�Pavel Kopylov <pkopylov@cloudlinux.com> - 20200421-83.git78c0348.tuxcare.els2f��@- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 (AMD-SB-7014), CVE-2023-20592 (AMD-SB-3005) - Update AMD CPU microcode to 2024-08-11 H � � 1 � � z � $�C�U�D���% H �X��k�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9��k� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6��k��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��ki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)� ����'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden��e{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x�� e� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)��e��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y��~e�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above�X��}k�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9��|k� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6��{k��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��zc?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��yc?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��xki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)� ��w��'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden��ve{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x��ue� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)��te��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y��se�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above H � � 1 � � z � $�C�U�D���% H �X�� k�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9�� k� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6�� k��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��ki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)� ����'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden��e{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x��e� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)��e��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y��e�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above�X��k�G�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29T��- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)�9��k� �Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28T��- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569) - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)�6��k��Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27T��- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#1171211)O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-26R�U�- Mass rebuild 2014-01-24O��c?�Daniel Mach <dmach@redhat.com> - 1.900.1-25R�k�- Mass rebuild 2013-12-27h��ki�Jiri Popelka <jpopelka@redhat.com> - 1.900.1-24QP<@- added --force option to autoreconf (#925604)� �� ��'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden�� e{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x�� e� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)�� e��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y�� e�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above � � � 1 � � B � *��:�1�:��] � � �C��6w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��5sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��4sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��3sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���2s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��1sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��0ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���/q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��.sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���-s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��,sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��+sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��*W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��)o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���(s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��'o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��&oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��%wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��$�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM� ��#��'�Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 1.900.1-33.tuxcare.els1f�w�- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing coden��"e{�Josef Ridky <jridky@redhat.com> - 1.900.1-33[+�A- remove implicit declaration of jas_eprintf (#1585830)x��!e� �Josef Ridky <jridky@redhat.com> - 1.900.1-32[+�@- Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)�� e��Josef Ridky <jridky@redhat.com> - 1.900.1-31Y.�@- Fix missing declaration of SIZE_MAX constant in jas_math.h (#1455489)�Y�� e�O�Josef Ridky <jridky@redhat.com> - 1.900.1-30X�:@- Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 - Fix implicit declaration warning caused by security fixes above � Y�� � 6 � J � M � } ���9�B��(�r�S�f � b��VoY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��UmQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��To��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��Soc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��Ro}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��Qq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���Pu�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��Ow�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��Nw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��Mw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��LwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��Ku�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��Jw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��IwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���Hw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��GwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��Fu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��Ew�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��Dw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��Cw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��Bws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��Aw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��@w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��?u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���>w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��=wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��<w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��;y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��:wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��9w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��8wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��7�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild � �*�/ � { � W � { � & � �H���%��`� � j��qoi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��po�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���oq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��nq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��mq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���l���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��kqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��jq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��iq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��hq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��gq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��fq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��eo�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��do� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���co�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��boE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��aqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��`qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��_qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��^q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��]�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��\o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��[oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��Zo�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��YiE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��Xoy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��WoM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zip } � � � E p � l � ����S� �!�� � } h��oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$�� �K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��~}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���}}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���|q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��{q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��zo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���yq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��xq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��wo�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��vq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��uq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��to��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��so�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��ro� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260 P y�A � � ( x � ��~���8� � P �*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U�� }�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378��� }�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� �� }� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!�� }�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301��� }� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301 @ � � � � b � q�2�6�\k� @ �S��/}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��.}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��-}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��,}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��+}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��*o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���)o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��(om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���'}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��&o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���%o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��$o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��#o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��"}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��!}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v�� q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m�� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571��� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530 � X� � � E � � CQ6��*�H�� � ���B}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��A}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��@g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��?gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��>}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��=}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��<}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���;}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���:}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��9}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���8}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��7}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��6}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��5}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��4}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��3}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��2}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��1}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��0}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754 � P� � # � � ��/��Q\��'�N � �/��X}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��W}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��V}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��U}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��T}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��S}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��R}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���Q}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��P}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��O}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��N}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��M}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��L}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��K}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���J}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��I}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��H}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��G}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��F�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��Es�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��D}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��C}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108 � U� � � ! � �����$��!� � �<��jq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��iq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��h�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��g�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��f�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��e�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��d�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��c}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��bo�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���a}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���`o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��_o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���^}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���]}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��\}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��[}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��Z}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��Y}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810 w ._ K � v � � b�Z� Y��( w ���}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���|�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��{�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��z�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��y�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��x�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��w�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��v�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��u�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��tq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��s�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��r�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��qq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��pq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��oi�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��n�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���m�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��k� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863 � � - ] � Z u L�c��Y�e� � �`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'�� ��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774��� �9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O�� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��~�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612 T [�E � � L � q ��(���_D� T �)��#�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��"q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��!�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!�� �E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&�� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514 � � $ � � a � � /_�G�J V � �+��5�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��3�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��2��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���1�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���0�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��/�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���.�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��-�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��,q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��+}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��*�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��)�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��(q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��'�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���&�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��%�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���$�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207 � 4 w � 8 � p��H��6W� � ��Fq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��E�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��D�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��C�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��B�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��A�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���@� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��?�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��>q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��=�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��<�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��;�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���:�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���9�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��8�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��7�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���6q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233 R � c �����N��+B� � R ���U�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��T�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��S�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��R�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���Q��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��Pu�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��O�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��N�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��M�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��L� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��K�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��J�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��I�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��H�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���G�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700 ; @� � E � } � ~n�E� n~� � ; �<��k�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��j�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��i�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��h�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���g�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��f�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���e�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��d�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���b�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��au�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���`�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���_�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��^�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���]�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��\�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��[��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��Z� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��Y�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���X�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��W�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��V�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032 c q� � � �����6� c �!��ys�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��x�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��ws�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��v��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���u�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��tq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��s� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��r�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��q�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��p� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��oq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��nq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��m��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817 � 9� � O { I o ���?��\ � � �� �=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"���G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U�� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��~�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���}�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��|� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��{��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��zs��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817 ^ } � � � � JR�(�3G�� � ^ � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468� ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q�� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~�� ��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468 q� � 4 k � � D ��H� $��eg� �-��.�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���-�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��,�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���*� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���)� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��(� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��'� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���$� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��#� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932� ��"��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��!�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1�� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452��� � �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j�� �W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452 � �, � f -�Pe�;�|� { � �A��A� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��@�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��?�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��>� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���=� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���;� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���:� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���9� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��8� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���7� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��6� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557�4��5�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��4� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��2� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��1� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��0� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���/�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874 x h � � U � � d�+�l�&��C x �F��U� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��T� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���S� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��P� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��O{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��N� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��M� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���L� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��K� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��J� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811�A��I� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��H� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���G� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��F� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��D� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���B� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811 ^ � � � v��7M��'� � ^ ���e� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���d� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��b� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��a� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���`� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��_� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��^� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���\� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665� ��[� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��Zq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��Y�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��X�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��W�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���V� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811 D T" � � .� A���E4 D �k��t�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��s� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��r� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��q� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��p� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��o� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��n� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���l{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���k� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903�0��j�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��i�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��h�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��g� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��f{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � a( i � � , Wn��1A�B� � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��~� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��}� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��|� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���{� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��x� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��w� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��v� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���u�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963 B J [ � � � * `��=���B �P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�� � �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809 � � � � e��� � �n��!�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 9 d \ � � �[�B�S�j � 9 �"��/o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���.s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��-o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��,oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��+wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��*�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�w��)� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���(�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��'�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���&q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��%�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��$� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���#� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���"�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 | � �" � & � T K � } C�.�U�y���7�E�7 � | \��MwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��Lu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��Kw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��Jw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��Iw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��Hws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��Gw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��Fw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��Eu�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���Dw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��CwO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��Bw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��Ay��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��@wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��?w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��>wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��=�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��<w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��;sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��:sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��9sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���8s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��7sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��6ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���5q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��4sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���3s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��2sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��1sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��0W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache � g � � j � j � 9 � � -�f�7�7�=�F��'� h � v��lq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��ko�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��jo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���io�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��hoE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��gqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��fqU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��eqy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��dq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��c�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��bo9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��aoI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��`o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��_iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��^oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��]oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��\oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��[mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��Zo��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��Yoc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��Xo}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��Wq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���Vu�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��Uw�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��Tw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��Sw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��RwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��Qu�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��Pw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��OwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���Nw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm � � a � � ' � @�"�@��g�� : � ���q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��~q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��}o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��|q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��{q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��zo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��yo�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��xo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��woi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��vo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���uq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��tq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��sq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���r���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��qqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��pq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��oq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��nq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��mq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changes p eB o � � ��\�i�1��h�� � p � ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� �� o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260��� q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h�� }W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$���K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260 � i � n � $ � ,���\j�2�A � � ��,o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���+o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��*o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��)o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��(}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��'}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��&q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��%�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���$q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��#�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��"�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h�� qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p�� qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{�� {�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R�� q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378 � c � g � � � Iq�qE�S � ���>}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��=}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��<}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��;}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��:}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��9}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��8}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��7}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��6}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��5}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��4}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��3}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��2}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��1}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��0o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���/o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��.om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���-}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657 y � ` � � l ? ���Er�F�� �+ y �-��S}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��R}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��Q}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���P}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��O}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��N}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��M}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��L�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��Ks�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��J}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��I}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���H}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��G}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��Fg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��Egc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��D}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��C}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��B}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���A}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���@}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��?}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108 f L� n y � � D �k� �gq�9s f ���fo�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��eo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���d}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���c}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��b}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��a}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��`}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��_}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��^}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��]}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��\}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��[}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��Z}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��Y}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��X}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���W}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��V}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��U}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��T}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423 � i� u � % r �9g��%�� M � �-��y�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��x�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��wq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��vq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��ui�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��t�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���s�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��q� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��pq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��oq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��n�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��m�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��l�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��k�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��j�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��i}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��ho�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���g}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258 � r � U � � 9 { ���Br�o�a � ��� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$�� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`�� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O���!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9�� �u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9���u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��~�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��|�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��{�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��zq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224 � �1 C � � ��a�K�R� w� � �=�� ��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U�� s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#�� m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� �� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'����M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N�� i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306 � S � � ' 0 � o�-b�^�*. � |��1}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��0�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��/�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��.q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��-�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���,�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��+�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���*�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��)�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��(q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��'�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���&�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��%�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��$�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��#�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��"�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509 � 0o � � � �'wZ��O�? � �#��B�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��A�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���@�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���?�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��>�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��=�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���<q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��;�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��9�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��8��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���7�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���6�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��5�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���4�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��3�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��2q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207 � P� � ( r � 7 � �c�� � �$��Q�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��P�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��O�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��N�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���M�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��Lq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��K�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��J�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��I�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��H�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��G�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���F� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��E�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��Dq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��C�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766 � �4 � � e | � �� y��C� 3� � x��gu�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���f�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���e�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��d�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���c�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��b�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��a��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��`� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��_�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���^�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��]�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��\�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���[�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��Z�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��Y�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��X�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���W��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��Vu�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��U�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��T�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��S�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��R� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700 l�C � l | ��9��3� �X��w�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��v� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��uq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��tq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��q�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��p�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��o�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��n�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���m�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��l�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���k�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��j�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���i��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���h�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249 I � � 0 b�5��$j� ��I �0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817����� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ����=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B�� s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��~�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��}s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��|��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���{�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��zq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��y� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��x�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~����Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241��� m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� �� m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"�� �G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��(��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��'�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��&�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��%�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��$� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���#� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��"�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��!�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U�� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��;�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��:� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���9��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��8� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��7� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��6� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���5�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��4�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���3�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��2�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���1� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���/� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��.� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��-� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���*� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��)� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��O� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��N� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��L� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���K� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��J� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���H� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��G� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��F�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��E�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��D� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���A� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���?� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��>� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���=� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��<� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��a� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��`q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��_�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��^�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��]�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��[� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��Z� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���Y� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���W� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��V� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��U{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��T� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��S� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��Q� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��P� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��p�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��o�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��n�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��m� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��l{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���k� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���j� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��h� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��g� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���f� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��e� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��d� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���b� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��~� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��}� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��|� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��z�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��x� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��w� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��v� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��u� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��t� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��s� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���r{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���q� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�� � �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��+�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��*� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���)� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���(�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��'�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��&� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��%� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��$�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��#�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��"��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ���3� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���2�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��1�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��0� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��/� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���.�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��-�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���,q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��<�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��;� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�X��:�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��9� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���8�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��7�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���6q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��5�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��4� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��E�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��D� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���C�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��B�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Aq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��@�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��?� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���>� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���=�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � � � (/�K � �w��N� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���M�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��L�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Kq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��J�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��I� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���H� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���G�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��F�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � # � v��� ���Vq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��U�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��T� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���S� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���R�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��Q�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�5��P�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��O�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array" K � 9 ���/�\�D� �T � K p��fsq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���es�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��dsW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��csS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��bW� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��ao�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���`s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��_o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��^oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��]wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��\�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5��[�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��Z�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��Y� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���X�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��W�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � x � � , � ] � � � �$�f�;���B�.�5�� � �f��u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY��� w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��~u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��}w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��|w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��{w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��zws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��yw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��xw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��wu�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���vw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��uwO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��tw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��sy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��rwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��qw[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��pwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��o�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��nw��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��msm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��lsC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��ksk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���js��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��isO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��hue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���gq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballs � �%� o � P � c � < � m�ms�|�]�B�$�+ � �!��!q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4�� q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;�� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv�� q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� �� o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ���+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]�� mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~�� o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg�� oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t�� o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"�� q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output � �<� � w � / � ��]�1�-��N�� � �N��7}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��6}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���5}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���4q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��3q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��2o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���1q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��0q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��/o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��.q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��-q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��,o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��+o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��*o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��)oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��(o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���'q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��&q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��%q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���$���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��#qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��"q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir o W� � % � � � � � T�%K���t�j � o � ��N}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��M}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���L}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��K}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��J}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��I}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��H}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��G}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��F}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��E}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���D}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��C}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��B}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���A}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��@oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��?o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��>o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���=q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��<o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��;}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���:q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��9s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��8�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260 � � * � J � b Zh��D�[�1�$ � ���ao�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��`om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���_}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��^o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���]o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��\o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��[o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��Z}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��Y}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��Xq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��W�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���Vq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��U�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��T�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��Rqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��Qqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��P{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��Oq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077 � P & 5 � � b�� �O��M[@ � ���s}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���r}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��q}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���p}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��o}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��n}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��m}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��l}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��k}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��j}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��i}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��h}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��g}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��f}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��e}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��d}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��c}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��bo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754 � G� � � : 6 ��Y�VH�>�e�' � ��� }�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��~�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��}s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��|}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��{}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���z}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��y}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��xg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��wgc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��v}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��u}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��t}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108 5 � � H � I � "�j��a� �7��}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1�� }�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$�� }�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q�� }�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p�� }�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423 u W � T � Izf���/}� u �u��-�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��,q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��+�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��*�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��)q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��(q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��'i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��&�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���%�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��$��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��#� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��"q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��!q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� �� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%�� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037 ]� � A � � � � Jzw�i�� x��@i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��?i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���>�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��=�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��<�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��:i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��9i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��8�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��7��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��6�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���5�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���4�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��3�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��2�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��1�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��0�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��/�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��.�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736 o r � ~ � � 0�[�!��Fl� � o � ��S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��R�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��Q��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��Ps�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��Om�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��N�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��Mq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��L�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���K� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��J�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��Iq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��H�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��G�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��F�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��E��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��D��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��C���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���B�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��A�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848 � b k � � � h ���I�ei�X � ���f�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��e�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��dq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��c}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��b�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��a�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��`q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��_�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���^�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��]�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���\�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��[�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��Zq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��Y�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���X�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��W�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��V�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��U�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��T�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 q A� D P ���x�h�I q �S��w�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��vq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��u�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��t�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��s�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���r�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���q�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��p�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��o�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���nq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��m�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��k�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��j��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���i�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���h�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��g�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260 � w� e � � O3��>I � �'���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5���m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6���o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��~q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��}�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��|�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��{�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��z�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��y�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���x� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766 � Lz � � L � D ��I����r�I � ��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� �� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249����#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!���E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y���5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032��� �!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/�� �a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#�� �I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d�� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249��� ��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/���a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700 f Z� � � K � � l-�;^f �s��*�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��)�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��(� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��'q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��&q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��%��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��$��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��#�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��"�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��!�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!�� �E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249 A � � ( Z � - �� b���A �0��9�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��8�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��7�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��6�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���5�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��4� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��3��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��2s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��1s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��0�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��/s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��.��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���-�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��,q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��+� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��G�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���F�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��E��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��C�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��B��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��A�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��@� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���?m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��>m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��=��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��<�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��;�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��:�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��Z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��Y�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��X�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��W�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��V� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���U� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��T�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��S�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��R��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��Q��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��P�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��O�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���N� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��M�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��L�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���I�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��H�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��m�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��l� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��j� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��i� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��h� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���g�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��f�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���e�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��d�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���a� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��`� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��_� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��[� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`�� � �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��~� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��|� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���z� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��y� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��x�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��w�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��v� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���u� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���s� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���r� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��p� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��n� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+�� � �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811��� � �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��"�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��!�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��2� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��1� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��0� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��/� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��.� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���-�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��,�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��*� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��)� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��(� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��'� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��&� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���${� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���#� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���D�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��C� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��B� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��A� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��@� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��?� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��=� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���:�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��9�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��8� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��7� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��6� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��5� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��4� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���3� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��R� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��P�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��O� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���N�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��M� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��L� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��K� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��J� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��I� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��H� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��G� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���E�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��]�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��\� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���[� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���Z�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��Y�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��X� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��W� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��V�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��U�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��T��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � �)�V�>��N�E�N� _��osO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��nue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���mq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��lsq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���ks�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��jsW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��isS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��hW� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��go�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���fs��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��eo�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��doC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��cwu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��b�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�w��a� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���`�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��_�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���^q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � � � ) � � H � o ~ %�9�<�l����(�1��� � � �� w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w�� w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\�� wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f�� u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s�� ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��~w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��}u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���|w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��{wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��zw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��yy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��xwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��ww[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��vwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��u�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��tw��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��ssm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��rsC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��qsk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���ps��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation � n�( � E � b � � & � + � w�S�w�"���D��|! � ���*���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��)qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��(q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��'q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��&q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��%q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��$q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��#o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��"o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���!o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX�� oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z�� qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka�� qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas�� qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|�� q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ���+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� �� w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes � �7 � � 7 ��^� �1� �l � �9��?s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��>�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��=}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��<}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���;}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���:q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��9q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��8o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���7q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��6q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��5o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��4q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��3q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��2o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��1o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��0o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��/oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��.o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���-q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��,q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��+q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure � w � � � T � a � ) ��`���h�f� � ��T}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��S}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���R}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��Q}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��P}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��O}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��N}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��M}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��L}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��K}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���J}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��I}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��H}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���G}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��Foe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��Eo�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��Do��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���Cq�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��Bo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��A}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���@q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260 � � * � J � b Zh��D�[�1�$ � ���go�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��fom�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���e}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��do�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���co��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��bo_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��ao� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��`}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��_}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��^q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��]�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���\q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��[�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��Z�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���Y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��Xqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��Wqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��V{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��Uq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077 � P & 5 � � b�� �O��M[@ � ���y}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���x}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��w}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���v}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��u}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��t}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��s}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��r}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��q}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��p}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��o}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��n}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��m}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��l}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��k}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��j}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��i}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��ho�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754 � G� � � : 6 ��Y�VH�>�e�' � ���}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z�� }{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/�� }�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-�� }�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o�� }e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z�� }{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��~g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��}gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��|}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��{}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��z}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108 5 � � H � I � "�j��a� �7��!}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� �� o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414��� }�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258��� o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442��� }�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423 u W � T � Izf���/}� u �u��3�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��2q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��1�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��0�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��/q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��.q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��-i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��,�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���+�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��*��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��)� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��(q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��'q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��&�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��%�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��$�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��#�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��"�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037 ]� � A � � � � Jzw�i�� x��Fi� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��Ei�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���D�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��C�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��B�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��@i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��?i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��>�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��=��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��<�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���;�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���:�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��9�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��8�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��7�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��6�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��5�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��4�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736 o r � ~ � � 0�[�!��Fl� � o � ��Y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��X�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��W��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��Vs�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��Um�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��T�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��Sq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��R�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���Q� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��P�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��Oq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��N�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��M�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��L�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��J��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��I���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���H�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��G�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848 � b k � � � h ���I�ei�X � ���l�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��k�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��jq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��i}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��h�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��g�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��fq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��e�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���d�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��c�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���b�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��a�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��`q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��_�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���^�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��]�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��\�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��[�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��Z�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 q A� D P ���x�h�I q �S��}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��|q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��{�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��z�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��y�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���x�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���w�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��v�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��u�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���tq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��s�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��q�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��p��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���o�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���n�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��m�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260 � w� e � � O3��>I � �'�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5�� �m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� �� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$�� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6���o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���~� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766 � Lz � � L � D ��I����r�I � ���#�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��"�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x�� u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249��� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q�� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!���E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y���5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/���a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249�����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/�� �a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700 f Z� � � K � � l-�;^f �s��0�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��/�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��.� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��-q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��,q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��+��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��*��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��)�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��(�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��'�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��&�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���%�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��$�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249 A � � ( Z � - �� b���A �0��?�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��>�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��=�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��<�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���;�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��:� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��9��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��8s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��7s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��6�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��5s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���3�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��2q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��1� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��M�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���L�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��I�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��H��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��G�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��F� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���Em�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��Dm��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��B�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��A�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��@�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��`��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��_�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��^�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��]�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���[� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��Z�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��Y�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��X��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��V�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��U�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���T� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��S�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��R�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��Q��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��P��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���O�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��N�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��s�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��r� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���q��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��p� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��o� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��n� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���m�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��l�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���k�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��j�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���h� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���g� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��f� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��e� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���d� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��a� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811��� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��~�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��|� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���x� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��v� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���u� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��t� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%�� {�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B�� � �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I�� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� �� � �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��(�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��'�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��&�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��%� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��${�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���#� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���"� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S�� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e�� � �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��8� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��7� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��6� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��5� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��4� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���3�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��2�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��1� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��0� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��/� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��.� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��-� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��,� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���*{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���)� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���J�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��I� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��H� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��G� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��F� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��E� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��D� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��C� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���@�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��?�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��=� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��<� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��;� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��:� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���9� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��Y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��X� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��W� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��V�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��U� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���T�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��S� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��R� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��Q� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��P� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��O� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��N� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��M� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���L� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���K�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��c�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��b� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���a� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���`�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��_�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��^� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��]� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��\�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��[�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��Z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ���k� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���j�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��i�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��h� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��g� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���f�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��e�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���dq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��t�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��s� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�X��r�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��q� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���p�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��o�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���nq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��m�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��l� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��}�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��|� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���{�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��z�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���yq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��x�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��w� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���v� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���u�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � � � (/�K � �w��� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��~�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � # � v��� ���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�5���+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X���-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array" K � 9 ���/�\�D� �T � K p�� sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823��� s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c�� sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s���c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5���+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X���-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � x � � , � ] � � � �$�f�;���B�.�5�� � �f��;u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��:w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��9wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���8w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��7wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��6u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��5w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��4w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��3w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��2ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��1w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��0w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��/u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���.w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��-wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��,w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��+y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��*wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��)w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��(wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��'�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��&w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��%sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��$sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��#sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���"s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��!sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk�� ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.��� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballs � �%� o � P � c � < � m�ms�|�]�B�$�+ � �!��Yq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��Xq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��Wq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��Vq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��Uo�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��To� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���So�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��RoE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��QqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��PqU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��Oqy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��Nq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��M�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��Lo9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��KoI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��Jo�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��IiE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��Hoy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��GoM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��FoY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��EmQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��Do��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��Coc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��Bo}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��Aq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���@u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��?w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��>w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��=w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��<wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output � �<� � w � / � ��]�1�-��N�� � �N��o}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��n}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���m}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���lq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��kq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��jo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���iq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��hq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��go�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��fq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��eq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��do��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��co�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��bo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��aoi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��`o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���_q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��^q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��]q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���\���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��[qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��Zq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir o W� � % � � � � � T�%K���t�j � o � ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s�� }m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��~}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��}}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���|}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��{}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��z}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���y}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��xoe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��wo�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��vo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���uq�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��to� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��s}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���rq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��qs��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��p�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260 � � * � J � b Zh��D�[�1�$ � ���o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h�� qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p�� qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077 � P & 5 � � b�� �O��M[@ � ���+}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���*}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��)}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���(}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��'}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��&}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��%}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��$}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��#}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��"}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��!}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#�� }�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S�� }�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N�� }�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l�� }�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754 � G� � � : 6 ��Y�VH�>�e�' � ���A}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��@}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��?}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��>}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��=}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��<}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��;}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���:}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��9}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��8}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��7}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��6�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��5s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��4}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��3}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���2}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��1}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��0g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��/gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��.}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��-}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��,}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108 5 � � H � I � "�j��a� �7��S}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��Ro�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���Q}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���Po�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��Oo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���N}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���M}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��L}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��K}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��J}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��I}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��H}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��G}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��F}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��E}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��D}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��C}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��B}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423 u W � T � Izf���/}� u �u��e�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��dq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��c�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��b�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��aq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��`q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��_i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��^�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���]�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��[� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��Zq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��Yq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��X�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��W�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��V�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��U�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��T�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037 ]� � A � � � � Jzw�i�� x��xi� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��wi�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���v�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��u�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��t�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��ri}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��qi�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��p�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��n�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���m�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���l�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��k�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��j�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��i�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��h�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��g�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��f�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736 o r � ~ � � 0�[�!��Fl� � o � �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=�� ��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��~�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��|��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��{���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���z�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��y�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848 � b k � � � h ���I�ei�X � ��� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K�� q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w���q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207����#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&�� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 q A� D P ���x�h�I q �S��/�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��.q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��-�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��,�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��+�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���*�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���)�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��(�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��'�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���&q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��%�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��$��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��#�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��"��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���!�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260 � w� e � � O3��>I � �'��>�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��=�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��<� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��;�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��:�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��9�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��8�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���7�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��6q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��5�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��4�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��3�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��2�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��1�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���0� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766 � Lz � � L � D ��I����r�I � ���U�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��T�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���R�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��Qu�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���P�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���O�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��N�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���M�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��L�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��J� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��I�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���H�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��G�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��F�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���E�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��D�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��C�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��B�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���A��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��@u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��?�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700 f Z� � � K � � l-�;^f �s��b�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��a�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��`� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��_q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��^q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��[�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��Z�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��Y�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��X�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���W�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��V�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249 A � � ( Z � - �� b���A �0��q�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��p�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��o�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��n�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���m�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��l� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��k��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��js��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��is�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��h�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��gs�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��f��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���e�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��dq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��c� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���~�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��|��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��{�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��z��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��y�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��x� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���wm�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��vm��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��u��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��t�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��s�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��r�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452��� � �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j�� �W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��%�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��$� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���#��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��"� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��!� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7�� � �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753��� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-�� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928��� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y�� �u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��9� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��8� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���7� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��6� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���5� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��4� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���3� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���2� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��1� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��0�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��/�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��.� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���-� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���*� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���)� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��(� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��&� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��K� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��Jq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��I�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��H�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��G�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��D� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���C� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���A� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��@� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��?{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��>� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��=� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��;� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��:� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��Z�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��Y�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��X�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��W� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��V{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���U� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���T� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��R� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���P� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��O� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��N� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���L� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��j� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��i� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��h� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��g� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��f� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���e�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��d�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��b� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��a� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��`� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��_� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��^� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���\{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���[� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���|�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��{� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��y� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��x� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��w� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��v� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��u� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���r�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��q�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��p� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��o� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��n� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��m� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��l� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���k� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��%�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�X��$�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��#� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���"�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��!�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577��� q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��.�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��-� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���,�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��+�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���*q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��)�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��(� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���'� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���&�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � O � | � d � @ � t�k�t�:� Y�� � ��Gy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��Fwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��Ew[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��Dwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��C�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��Bw��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��Asm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��@sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��?sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���>s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��=sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��<ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���;q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��:sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���9s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��8sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��7sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��6W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��5o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���4s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��3o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��2oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��1wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��0�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5��/�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE) ! � �B� � e � s e � � _t���<�Y�v�:�? � � R��ho9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��goI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��fo�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��eiE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��doy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��coM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��boY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��amQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��`o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��_oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��^o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��]q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���\u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��[w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��Zw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��Yw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��XwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��Wu�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��Vw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��UwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���Tw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��SwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��Ru=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��Qw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��Pw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��Ow{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��Nws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��Mw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��Lw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��Ku�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���Jw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��IwO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��Hw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106 � \�e � F � + � � n�4�M�/�M � ~�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��~o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��}oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��|o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���{q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��zq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��yq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���x���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��wqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��vq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��uq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��tq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��sq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��rq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��qo�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��po� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���oo�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��noE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��mqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��lqU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��kqy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��jq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��i�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild � ;� � V � N | � V 3`��p���M�Z�" � ���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9�� s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$�� �K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N�� }�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� �� }�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260��� }�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260 8 &� � ] O a � E�J�t �[�� � 8 v��,q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��+�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���*q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��)�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��(�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���'��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��&qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��%qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��${�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��#q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��"}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��!}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378��� }�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i�� }�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s�� }m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378 V V � m � C � 6����_�� T V �y��>}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��=}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��<}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��;}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��:}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��9}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��8}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��7}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��6o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���5o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��4om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���3}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��2o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���1o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��0o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��/o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��.}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��-}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163 Z ^2 � � @ � � � H� ��;7�� Z �4��R�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��Qs�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��P}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��O}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���N}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��M}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��Lg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��Kgc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��J}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��I}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��H}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���G}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���F}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��E}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���D}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��C}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��B}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��A}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��@}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��?}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754 P �� � c � r � � � .9c�v+w�P x��f}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��e}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��d}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��c}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��b}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��a}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��`}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��_}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��^}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���]}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��\}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��[}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��Z}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��Y}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��X}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��W}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���V}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��U}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��T}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��S}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665 n � � H � � � ?���K��H�= n �J��x��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��w� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��vq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��uq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��t�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��s�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��r�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��q�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��p�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��o}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��no�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���m}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���lo�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��ko��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���j}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���i}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��h}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��g}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322 � � � Z s � u�X��<~�� � �)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9���u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9���u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u���m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� �� q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��~�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��}q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��|q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��{i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��z�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���y�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857 / /[ � � � z ��'�����E � / d�� q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'����M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K�� i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O�� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948 A� w � , R ��Ub���=� �)��/�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��.q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��-�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���,�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��+�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��*�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��)�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��(�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��'��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��&�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��%��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��$s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��#m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��"�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��!q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-�� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417 � � $ � � a � � /_�G�J V � �+��A�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��@��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��?�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��>��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���=�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���<�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��;�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���:�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��9�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��8q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��7}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��6�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��5�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��4q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��3�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���2�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��1�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���0�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207 � 4 w � 8 � p��H��6W� � ��Rq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��Q�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��P�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��O�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��N�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��M�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���L� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��K�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��Jq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��I�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��H�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��G�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���F�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���E�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��D�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��C�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���Bq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233 R � c �����N��+B� � R ���a�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��`�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��_�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��^�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���]��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��\u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��[�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��Z�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��Y�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��X� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��W�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��V�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��U�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��T�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���S�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700 ; @� � E � } � ~n�E� n~� � ; �<��w�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��v�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��u�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��t�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���s�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��r�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���q�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��p�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���n�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��mu�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���l�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���k�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��j�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���i�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��h�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��g��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��f� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��e�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���d�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��c�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��b�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032 c q� � � �����6� c �!��s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t�� q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��~�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��}�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��|� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��{q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��zq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��x��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817 � 9� � O { I o ���?��\ � � ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"���G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577�0�� �c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U�� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-�� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817��� �� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ����=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817 ^ } � � � � JR�(�3G�� � ^ � ��%��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��$�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��#�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���"� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��!�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a�� �E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468� ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~����Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468 q� � 4 k � � D ��H� $��eg� �-��:�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���9�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��8�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���7� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���5� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��4� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��3� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���2� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���1� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��/� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932� ��.��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��-�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��,�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��+�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��*� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���)� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��(�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��'�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��&��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452 � �, � f -�Pe�;�|� { � �A��M� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��L�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��K�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��J� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���G� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��D� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��B� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557�4��A�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��@� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���?��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��>� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��=� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��<� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���;�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874 x h � � U � � d�+�l�&��C x �F��a� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��`� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���_� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��\� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��[{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��Z� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��Y� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��W� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��V� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811�A��U� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��T� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��R� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��P� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���O� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���N� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811 ^ � � � v��7M��'� � ^ ���q� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���p� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��n� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���l� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��k� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��j� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���h� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665� ��g� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��fq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��e�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��d�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��c�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811 D T" � � .� A���E4 D �k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��~� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��}� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��|� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��{� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���x{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���w� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903�0��v�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��u�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��t�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��s� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��r{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � a( i � � , Wn��1A�B� � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�� � �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963 B J [ � � � * `��=���B �P��#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���"�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��!� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� � �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809 � � � � e��� � �n��-�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��,� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��+� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��*�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��)�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��(��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��'��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��&� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��$�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 W d \ � � �[�BW �f��6� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��5� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���4�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��3�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���2q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��1�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��0� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���/� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���.�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � � � (/�K � �w��?� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���>�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��=�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���<q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��;�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��:� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���9� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���8�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��7�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 n # � KR5 n ���H�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��G�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Fq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��E�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��D� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���C� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���B�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��A�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�X��@�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array" > � � m�~#� d����� � > m��[sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���Zs��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��YsO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��Xue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���Wq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��Vsq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���Us�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��TsW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��SsS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��RW� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��Qo�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���Ps��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��Oo�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��NoC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��Mwu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��L�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5��K�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��J�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��I� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources Q �1i � T � { � � : � � ]�k]� �Wl � z�4 � Q g��{oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��zo}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��yq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���xu�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��ww�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��vw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��uw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��twE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��su�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��rw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��qwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���pw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��owE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��nu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��mw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��lw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��kw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��jws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��iw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��hw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��gu�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���fw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��ewO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��dw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��cy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��bwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��aw[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��`wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��_�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��^w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��]sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��\sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarball ~ �W � � � � 2 � � 2 � x�]�?�F�7�Hf ���q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure������Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� �� o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot��� o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX�� oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z�� qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ���+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr�� oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��~oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��}mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��|o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from files m P � � ~ � ' R�N��o���5w�� m ���-q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��,o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��+}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���*q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��)s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��(�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��'}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��&}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���%}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���$q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��#q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��"o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���!q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z�� q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P�� o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� �� q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@�� q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it � ^ � k � 3 � � j���r�p�� � p��Aqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��@{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��?q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��>}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��=}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���<}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��;}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��:}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��9}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��8}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��7}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��6}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��5}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���4}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��3}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��2}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���1}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��0oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��/o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��.o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260 �[ � � � 8 F�� {�n�2 �%��S}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��Ro�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���Qo�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��Pom�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���O}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��No�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���Mo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��Lo_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��Ko� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��J}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��I}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��Hq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��G�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���Fq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��E�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��D�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��Bqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077 f � � � < � � ��)t�'5���, f �A��hg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��ggc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��f}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��e}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��d}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���c}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���b}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��a}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���`}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��_}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��^}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��]}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��\}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��[}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��Z}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��Y}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��X}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��W}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��V}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��U}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��T}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754 ~ [ W � 3 z wi�_�:�H���4 ~ �1��}}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��|}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��{}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��z}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���y}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��x}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��w}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��v}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��u}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��t}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��s}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���r}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��q}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��p}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��o}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��n�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��ms�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��l}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��k}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���j}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��i}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630 � r' s � L # -��/"��@A��G � �.���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ���;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%�� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7�� }�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� �� o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414��� }�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/�� }�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��~}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423 � � � � & � =���)�!~� b � �9��"�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��!�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� �� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u�� �m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� �� q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9���u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019 � K5 � l � � � ���P����+ � �'��4��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��3���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���2�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��1�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��0i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��/i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���.�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��-�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��,�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��+��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��*i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��)i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��(�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��'��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��&�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���%�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���$�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��#�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132 � < W � � � U � p��,��S\ � �!��G�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��F�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��E�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��D�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��B�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��A��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��@s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��?m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��>�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��=q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��<�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���;� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��:�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��9q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��8�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��7�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��6�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��5��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751 ? �# � � � ��V��$T��<� ? �H��Z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���Y�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���X�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��W�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���V�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��U�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��Tq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��S}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��R�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��Q�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��Pq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��O�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���N�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��M�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���L�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��K�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��Jq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��I�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���H�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079 � � \ ? ��4�$|�-��7 � � ��k�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��j�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��i�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���h� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��g�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��fq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��e�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��d�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��c�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���b�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���a�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��`�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��_�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���^q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��]�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��[�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017 , !y � �M�����8�� , �d��z�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���y��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��xu�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��w�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��v�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��u�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��t� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��s�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��r�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��q�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��p�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���o�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��nq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��m�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��l�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700 � X� P � � U � !��"�~�U�~ � �k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� �� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x�� u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249����#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!���E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y���5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��~�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��|�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��{�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249 � #~ � . � ` �n��PW� ��� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t�� q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s���i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X���3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X���3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822 � 2 � _ � � : �����L � �)��,�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��+�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��*�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577�0��)�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��(�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��'�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��&�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���%�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��$� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��#��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��"s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��!s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-�� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w�� s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817 � ql � { � "Tg��2�� � �g��=�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��<�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���9�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��8�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468� ��7�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���6�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��5��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��3�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��2��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��1�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��0� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���/m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��.m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��-��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577 � x � � � � � K��[��_�5&; � ���Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��P� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��O� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���L� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��K� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932� ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��I�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��H�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��G�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���E� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��D�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��C�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��@�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��?�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328 � k� � > � t � ����q��\�2 � ���d� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���a� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��`� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���_� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��^� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557�4��]�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��\� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���[��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��Z� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��Y� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��X� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���W�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��V�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���U�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��T�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109 _ k� j � w ?��d�d��� _ �,��x� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��w{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��v� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��u� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��s� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��r� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811�A��q� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��p� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��n� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��l� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���k� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���j� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��i� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��h�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��g�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��f� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���e� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557 � k�8 � � � ?��3��� � � ���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665� ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%�� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��|� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���{� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811 U /; � r � �U�}��5 U �[��� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 � !b Q a � � � L�n��Q� � �k��)�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��(� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��'� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��&� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��%� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��$� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���#� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��"� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��!� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4�� � �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081��� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903 1 a� B � � � � `I���%g� 1 �Z��=� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��<� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��;� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��:� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��9� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��8� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��7� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���5�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���4�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��3� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��2� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��1� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��0� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��/� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��.� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��-� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���+��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���*�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201 ! � � 0 Z � ��HQ� ! �n��I�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��H� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��G� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��F�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��E�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��B� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��A� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��@�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��?� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���>�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 9 d \ � � �[�B�S�j � 9 �"��Wo�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���Vs��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��Uo�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��ToC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��Swu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��R�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�w��Q� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���P�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��O�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Nq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��M�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��L� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���K� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���J�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 | � �" � & � T K � } C�.�U�y���7�E�7 � | \��uwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��tu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��sw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��rw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��qw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��pws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��ow7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��nw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��mu�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���lw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��kwO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��jw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��iy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��hwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��gw[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��fwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��e�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��dw��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��csm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��bsC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��ask�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���`s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��_sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��^ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���]q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��\sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���[s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��ZsW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��YsS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��XW� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache � g � � j � j � 9 � � -�f�7�7�=�F��'� h � v��q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas�� qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|�� q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� �� �+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR�� o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z�� oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t�� o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���~u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��}w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��|w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��{w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��zwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��yu�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��xw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��wwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���vw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm � � a � � ' � @�"�@��g�� : � ���*q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��)q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��(o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���'q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��&q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��%o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��$q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��#q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��"o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��!o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j�� oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+�� o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it��� q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK�� q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure������Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changes p eB o � � ��\�i�1��h�� � p � ��A}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��@}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��?}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��>}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��=}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��<}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��;}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���:}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��9}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��8}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���7}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��6oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��5o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��4o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���3q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��2o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��1}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���0q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��/s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��.�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��-}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��,}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���+}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260 � i � n � $ � ,���\j�2�A � � ��To�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���So��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��Ro_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��Qo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��P}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��O}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��Nq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��M�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���Lq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��K�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��J�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���I��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��Hqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��Gqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��F{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��Eq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��D}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��C}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���B}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378 � c � g � � � Iq�qE�S � ���f}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��e}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��d}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��c}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��b}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��a}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��`}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��_}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��^}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��]}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��\}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��[}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��Z}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��Y}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��Xo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���Wo�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��Vom�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���U}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657 y � ` � � l ? ���Er�F�� �+ y �-��{}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��z}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��y}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���x}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��w}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��v}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��u}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��t�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��ss�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��r}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��q}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���p}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��o}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��ng� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��mgc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��l}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��k}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��j}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���i}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���h}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��g}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108 f L� n y � � D �k� �gq�9s f ���o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A�� o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442��� }�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810��� }�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q�� }�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$�� }�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p�� }�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��~}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��}}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��|}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423 � i� u � % r �9g��%�� M � �-��!�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9�� �u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b�� q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8�� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r�� i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z�� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ���;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258 � r � U � � 9 { ���Br�o�a � ���4�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��3�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��2�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��1��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��0i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��/i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��.�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��-��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��,�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���+�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���*�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��)�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��(�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��'�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��&�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��%�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��$�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��#�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��"q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224 � �1 C � � ��a�K�R� w� � �=��G��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��Fs�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��Em�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��D�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��Cq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��B�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���A� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��@�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��?q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��>�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��=�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��<�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��:��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��9���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���8�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��7�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��6i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��5i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306 � S � � ' 0 � o�-b�^�*. � |��Y}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��X�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��W�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��Vq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��U�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���T�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��S�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���R�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��Q�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��Pq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��O�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���N�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��M�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��L�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��K�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��J�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��I��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��H�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509 � 0o � � � �'wZ��O�? � �#��j�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��i�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���h�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���g�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��f�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��e�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���dq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��c�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��b��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��a�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��`��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���_�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���^�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��]�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���\�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��[�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��Zq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207 � P� � ( r � 7 � �c�� � �$��y�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��x�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��w�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��v�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���u�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��tq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��s�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��r�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��q�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��p�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��o�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���n� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��m�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��lq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��k�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766 � �4 � � e | � �� y��C� 3� � x��u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249��� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q�� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249��� �!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!�� �E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y���5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/���a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d�� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249�����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��~u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��}�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��|�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��{�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��z� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700 l�C � l | ��9��3� �X�� �3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D�� � �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$�� q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:�� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X���3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249 I � � 0 b�5��$j� ��I �0��/�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��.�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��-�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��,�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���+�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��*� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��)��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��(s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��'s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��&�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��%s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��$��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���#�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��"q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��!� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s�� �i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��=�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���<�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��9�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��8��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��7�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��6� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���5m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��4m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��2�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��1�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��0�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��P��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��O�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��N�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��M�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��L� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���K� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��J�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��I�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��H��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��G��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��F�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��E�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���D� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��C�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��B�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��@��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���?�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��>�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��c�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��b� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���a��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��`� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��_� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��^� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���]�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��\�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���[�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��Z�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���Y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���W� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��V� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��U� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��Q� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��w� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��v� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���u� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��t� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���s� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��r� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���p� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��o� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��n�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��m�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��l� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���k� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���j� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���h� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���g� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��f� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���e� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��d� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � �� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��~� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��}{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��|� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��{� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��y� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��x� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S�� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e�� � �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665��� � �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��(� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��'� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��&� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��%� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��$� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���#�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��"�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�� � �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���:�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��9� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��8� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��7� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��6� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��5� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��4� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��3� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��2� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���1��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���0�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��/�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��.� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��-� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��,� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��+� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��*� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���)� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��I��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��H� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��G� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��F�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���D�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��C� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��B� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��A� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��@� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��?� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��>� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��=� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���;�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��S�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��R� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���Q� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���P�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��O�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��N� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��M� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��L�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��K�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ���[� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���Z�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��Y�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��X� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��W� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���V�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��U�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Tq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��d�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��c� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�X��b�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��a� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���`�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��_�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���^q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��]�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��\� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��m�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��l� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���k�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��j�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���iq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��h�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��g� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���f� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���e�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � � � (/�K � �w��v� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���u�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��t�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���sq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��r�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��q� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���p� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���o�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��n�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � # � v��� ���~q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��|� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���{� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���z�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��y�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�5��x�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��w�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array" K � 9 ���/�\�D� �T � K p��sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823��� s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c�� sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma�� sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy�� W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"�� o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s���c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5���+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X���-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � x � � , � ] � � � �$�f�;���B�.�5�� � �f��+u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��*w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��)wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���(w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��'wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��&u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��%w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��$w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��#w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��"ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��!w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U�� w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� �� u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball��� w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega�� wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU�� w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"���1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballs � �%� o � P � c � < � m�ms�|�]�B�$�+ � �!��Iq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��Hq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��Gq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��Fq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��Eo�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��Do� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���Co�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��BoE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��AqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��@qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��?qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��>q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��=�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��<o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��;oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��:o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��9iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��8oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��7oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��6oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��5mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��4o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��3oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��2o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��1q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���0u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��/w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��.w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��-w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��,wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output � �<� � w � / � ��]�1�-��N�� � �N��_}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��^}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���]}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���\q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��[q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��Zo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���Yq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��Xq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��Wo�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��Vq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��Uq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��To��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��So�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��Ro� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��Qoi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��Po�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���Oq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��Nq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��Mq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���L���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��KqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��Jq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir o W� � % � � � � � T�%K���t�j � o � ��v}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��u}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���t}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��s}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��r}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��q}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��p}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��o}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��n}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��m}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���l}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��k}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��j}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���i}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��hoe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��go�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��fo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���eq�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��do� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��c}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���bq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��as��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��`�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260 � � * � J � b Zh��D�[�1�$ � ��� o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v�� q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���~q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��|�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��zqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��yqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��x{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��wq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077 � P & 5 � � b�� �O��M[@ � ���}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l�� }�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%�� }�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+�� o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754 � G� � � : 6 ��Y�VH�>�e�' � ���1}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��0}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��/}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��.}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��-}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��,}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��+}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���*}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��)}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��(}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��'}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��&�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��%s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��$}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��#}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���"}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��!}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A�� g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c�� gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w�� }u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;�� }�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4�� }�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108 5 � � H � I � "�j��a� �7��C}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��Bo�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���A}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���@o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��?o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���>}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���=}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��<}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��;}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��:}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��9}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��8}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��7}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��6}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��5}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��4}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��3}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��2}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423 u W � T � Izf���/}� u �u��U�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��Tq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��S�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��R�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��Qq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��Pq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��Oi�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��N�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���M�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��L��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��K� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��Jq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��Iq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��H�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��G�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��F�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��E�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��D�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037 ]� � A � � � � Jzw�i�� x��hi� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��gi�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���f�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��e�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��d�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��bi}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��ai�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��`�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��_��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��^�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���]�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���\�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��[�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��Z�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��Y�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��X�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��W�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��V�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736 o r � ~ � � 0�[�!��Fl� � o � ��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��z�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��y��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��xs�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��wm�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��v�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��uq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��t�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���s� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��r�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��qq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��p�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��o�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��n�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��m��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��l��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��k���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���j�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��i�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848 � b k � � � h ���I�ei�X � ����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K�� q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w�� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1�� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207����#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��~�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��|�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 q A� D P ���x�h�I q �S�� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B�� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#�� �I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8���s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260 � w� e � � O3��>I � �'��.�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��-�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��,� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��+�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��*�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��)�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��(�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���'�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��&q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��%�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��$�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��#�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��"�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��!�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766 � Lz � � L � D ��I����r�I � ���E�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��D�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���B�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��Au�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���@�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���?�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��>�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���=�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��<�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��:� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��9�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���8�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��7�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��6�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���5�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��4�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��3�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��2�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���1��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��0u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��/�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700 f Z� � � K � � l-�;^f �s��R�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��Q�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��P� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��Oq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��Nq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��L��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��K�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��J�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��I�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��H�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���G�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��F�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249 A � � ( Z � - �� b���A �0��a�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��`�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��_�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��^�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���]�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��\� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��[��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��Zs��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��Ys�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��X�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��Ws�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��V��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���U�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��Tq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��S� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��o�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���n�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��m��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��k�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��j��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��i�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��h� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���gm�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��fm��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��e��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��d�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��c�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��b�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���}� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��|�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��{�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��x�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��w�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���v� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��u�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��t�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���q�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��p�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928��� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y�� �u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��)� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��(� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��&� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��$� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���"� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��!� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� �� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1�� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"�� � �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��;� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��:q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��9�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��8�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��7�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��5� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��4� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���3� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���2� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���1� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��0� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��/{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��.� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��-� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��+� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��*� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��J�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��I�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��H�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��G� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��F{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���E� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���D� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��B� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��A� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��?� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��>� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���=� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���<� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��Z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��Y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��X� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��W� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��V� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���U�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��T�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��R� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��Q� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��P� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��N� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���L{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���K� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���l�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��k� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��j� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��i� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��h� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��g� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��f� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��e� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��d� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���b�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��a�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��`� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��_� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��^� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��]� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��\� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���[� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��z� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��x�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���v�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��u� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��t� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��s� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��r� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��q� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��p� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��o� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���m�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��~�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��|��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w�� � �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�X���-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 8 x �r+��V � � : � � e � � I � t - � � X ��<��g ��K�v/��Z��>��i"��M � xD�X � f1d037529130ae269690112b900b13a80eb73d49fbb6573cd070b143b007a131D�W � 1da9abb75f31531f7e557f8d05e58cc1e7cb7da61fcf229de9cbc3bd0fc3a59cD�V � 21c3ff4f82fac8b6507f415855cab060f0adfb9d7fcea456eb55476cd57c5a17D�U � bc1985234438dff69904314504cce84bf31dcb1fd0125717a5054ffa35e931daD�T � ab10df9343a06a85971db2d216e3bd4bbd947ab2a26f65dc9e0c655a20b044c3D�S � b5066b5019b9a20b65af5e8e7ec86496312928271e884a55c22887e5aa36d06cD�R � 5144f75b41a024ef1fc241af2c3f7f62d687b8f0900936ca3d05c027b0e2c089D�Q � e19f41cde3a218934c529d18b13e64f5d1a0ed614d996179aff8b9d32ec65b87D�P � ef30e01b15b4913e085549d4fe24791f45d1be91bcecccdb487b7582f811a2b7D�O � ea5b300d7e511701c8ea64b5be92426b1d02b3f22dd625ce9edfe067533ca2c0D�N � 5d5d57ece5942ce47bdb76b0a63f552e553144750e4243bc1e41ebf54030643dD�M � 0842c3ad42e8b17c22551ce907a0a81a7c7275567a1306752749acaf0562bb5aD�L � d1a45c3d5c08d049c56331844dac550176f74eee52d85229f909321774f65c9fD�K � 95083dd5b8bf8d8ae09eca79112bbb537349c9b99715b74453060c5601c33303D�J � 6f660300cd92728106efe436170d1477c74493b25c6ff4e254c40a3067bed5dcD�I � 70c9436fd498fcf052a80ca576ad83767fb605a4c68e63e63802f0f0df0856d9D�H � 90241f42a09c9ee5a3ddc4b36fd1a61331cd9877560123eca711f4a49da027ddD�G � 7851ebf629e8f182b1641c35f962787a89a79c6569934d4599c9751da2b5cc7cD�F � 03a5028b691e912720c53f2b2d1a0f96ee0e4c0e80e7aadf80a8338e25954c6bD�E � 5a5c1ad8aaf5daaeaef6ca70433779fc42762ea8df9a9e0fc881360813d60663D�D � 8b8e8c7e5de88a2ed0b4bd953037508ac5edd71c1359352c129945b15c7464aaD�C � 5dbc8654df503135aea979fd9689dfb7483ce09760091cd4ad1ec3f10e2c552eD�B � 9d5dfd00cb734b05399cf8706d6861af9510002731b2d28ea64e1cc0045e8eb0D�A � a38898c7108e62b2a7525f296e6105516de29689cdfab00e54bb6e3818503997D�@ � af74db5cc5dd207d0bd3949ee9082b0a1364a9a4a8764a2bd47730e0baee7107D�? � c97f7cf6eda8451cddcf195158139eaaec32b73acfe54413caf67d47862eac78D�> � d4a5373a556cd9d6bea5817ac872287b5d82712acab4b4a20b9d15ad1adb9d9dD�= � 27f7b50ff84c4cf5e5594e4e8b775bf1fd6c5749f17a40e7982b5dbbb8f905a8D�< � 147f14088d606716c90c76b25c658dfeb6853d6a5bd13eeef974c505a7d477dcD�; � 8f1077d2dfb332bf596fdd84b15810a0c18c8ff3e9c417bab032fa07a7614ea3D�: � bb68a915ee90c60e019c871e8d852e20b6007584ce1bc571833826a08951a24dD�9 � ca19d258b3f5ab0e27068ead8ae575b50ec9c93d55c696a240131e9181481a35D�8 � 72c7f63bfda50c6f3362d3fe5da4fcdabf3f1c215fb43fba79936cf12c2f675eD�7 � b7e26e2e052d36cf59193b9c731aac362ef334856ffb9f0012190dffbb6578edD�6 � 09c52832c473d846ea6a844e9c1f5f38fcb06862ad2c6fec9457842caf99ba91D�5 � 54d8f743826c150f9018d7669f5068dcbabb0b81adeacdbc7abd1290999d5b75D�4 � a6928b4b8efba03240847c61c9f79e5fceb8fc5ee3dc1417681ea2d48ce38cf4D�3 � 3708e13629069659370b124fcee084db9b2054072301ad005062cb83b9dfeda1D�2 � f4030beeb4f6671e2843d630e68596435db4b959aa6fb8a056206b0558597675D�1 � 8c4f4fdfa7391176c687637032afb50206d9485c4a481a67f2388e734ce907baD�0 � 69436469403b5ac352b6f5c434f7ce7b1290052737a6a8c0229982cd39712beeD�/ � 9f1c1ba57c731b712aae95f4456e2865598f8b54c2e7ad33a22957af621b3c71D�. � 6678c13281a2f84637ce4eeb72374ca4c58af3fe459269cad0100cc36c41cca8D�- � 8d3a6086582c2e7d10932010cd17a34af10bb1b185380b6e87eabbf0fcfacd53D�, � 34666ceeca9e1e33dbdc9791ee79f32422cab945dde7a9fc76b184079ea92c32D�+ � c8091a3ae6fd31cb2054aeb23a9b33918eb9d60e21ecadfa88a9ace829c85a62D�* � 42413079f7cd06d53ba675f73d0c0095e58f9c8c044843cc4ccc1a9f5f53d495D�) � dd532a9288c28eafa03be09f689ba4787fb9a9ef4220a3af8a65728bdf3657bdD�( � 695892666ea70224f99d942ce86f6c79ecce933cda9d8fbe45747197aca53809D�' � a32b5fd312b4fe4649041a24fdf255d02dc717d071a8b62de95ec09dde116879D�& � 5b8167f35fdc1ff39631784679e750e8dafc1780380977ce3fe92f79af43f3e8D�% � 976e7a404c597b0d97e3724927ee1f6b13e4bc16c718124e9f251fa348bb60caD�$ � 12fa034980294dedaf6fc280c734e4009db71447ac0e5d760c132ee8f2af1fa8D�# � 8a6613092c73aae97e024b85ee1ec5a892bf6a395e59ffd701e70437803db3ffD�" � d19b2386f3911d49cc61c0ae8f2d80fb488a7e795dfaffa952eb1a9033df337cD�! � 93a3631a28f68a86adb1c19fe0ceefaae727e985eec8474f46182cd6af733c8c e d \ � � �[�Be �X�� �-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w�� � �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � O � | � d � @ � t�k�t�:� Y�� � ��7y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��6wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��5w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��4wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��3�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��2w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��1sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��0sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��/sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���.s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��-sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��,ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���+q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��*sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���)s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��(sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��'sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��&W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��%o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���$s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��#o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��"oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��!wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s�� �c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5�� �+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE) ! � �B� � e � s e � � _t���<�Y�v�:�? � � R��Xo9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��WoI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��Vo�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��UiE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��Toy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��SoM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��RoY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��QmQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��Po��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��Ooc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��No}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��Mq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���Lu�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��Kw�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��Jw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��Iw{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��HwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��Gu�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��Fw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��EwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���Dw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��CwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��Bu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��Aw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��@w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��?w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��>ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��=w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��<w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��;u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���:w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��9wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��8w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106 � \�e � F � + � � n�4�M�/�M � ~��po��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��oo�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��no� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��moi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��lo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���kq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��jq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��iq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���h���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��gqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��fq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��eq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��dq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��cq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��bq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��ao�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��`o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���_o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��^oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��]qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��\qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��[qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��Zq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��Y�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild � ;� � V � N | � V 3`��p���M�Z�" � ���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���~q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��}s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��|�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��{}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��z}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���y}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���xq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��wq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��vo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���uq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��tq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��so�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��rq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��qq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260 8 &� � ] O a � E�J�t �[�� � 8 v�� q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s�� }m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+�� }�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� �� }�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U�� }�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378 V V � m � C � 6����_�� T V �y��.}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��-}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��,}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��+}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��*}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��)}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��(}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��'}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��&o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���%o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��$om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���#}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��"o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���!o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e�� o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|�� o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3�� }�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m�� }�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163 Z ^2 � � @ � � � H� ��;7�� Z �4��B�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��As�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��@}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��?}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���>}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��=}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��<g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��;gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��:}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��9}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��8}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���7}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���6}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��5}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���4}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��3}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��2}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��1}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��0}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��/}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754 P �� � c � r � � � .9c�v+w�P x��V}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��U}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��T}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��S}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��R}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��Q}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��P}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��O}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��N}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���M}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��L}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��K}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��J}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��I}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��H}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��G}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���F}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��E}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��D}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��C}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665 n � � H � � � ?���K��H�= n �J��h��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��g� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��fq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��eq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��d�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��c�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��b�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��a�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��`�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��_}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��^o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���]}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���\o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��[o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���Z}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���Y}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��X}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��W}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322 � � � Z s � u�X��<~�� � �)��z�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���y�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���x�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��w�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��v�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��u�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��t�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��s�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��r�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��q�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��pq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��o�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��n�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��mq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��lq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��ki�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��j�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���i�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857 / /[ � � � z ��'�����E � / d�� q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� �� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`�� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'����M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`�� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��~i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��}i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��|�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948 A� w � , R ��Ub���=� �)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|�� q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=�� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&���O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417 � � $ � � a � � /_�G�J V � �+��1�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��0��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��/�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��.��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���-�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���,�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��+�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���*�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��)�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��(q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��'}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��&�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��%�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��$q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��#�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���"�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��!�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207 � 4 w � 8 � p��H��6W� � ��Bq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��A�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��@�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��?�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��>�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��=�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���<� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��;�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��:q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��9�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��8�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��7�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���6�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���5�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��4�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��3�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���2q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233 R � c �����N��+B� � R ���Q�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��P�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��O�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��N�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���M��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��Lu�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��K�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��J�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��I�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��H� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$��G�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��F�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��E�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��D�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���C�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700 ; @� � E � } � ~n�E� n~� � ; �<��g�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��f�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��e�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��d�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���c�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��b�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���a�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��`�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���_��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���^�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��]u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���\�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���[�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��Z�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���Y�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��X�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��V� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��U�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���T�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��S�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��R�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032 c q� � � �����6� c �!��us�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��t�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��ss�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���q�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��pq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��o� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��n�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��m�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��l� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��kq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��jq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��i��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��h��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817 � 9� � O { I o ���?��\ � � ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"���G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��~�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577�0��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��|�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��z�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���y�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��x� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��w��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��vs��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817 ^ } � � � � JR�(�3G�� � ^ � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468��� �/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468� �� �=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468��� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~����Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468 q� � 4 k � � D ��H� $��eg� �-��*�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���)�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��(�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��$� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��#� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���"� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S�� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j���W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452 � �, � f -�Pe�;�|� { � �A��=� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��<�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��;�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��:� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���9� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���8� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���7� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���5� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��4� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���3� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��2� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557�4��1�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��0� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���/��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��.� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��-� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��,� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���+�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874 x h � � U � � d�+�l�&��C x �F��Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��P� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���O� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��L� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��K{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��J� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��I� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��G� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��F� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811�A��E� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��D� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��B� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���A� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��@� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���?� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���>� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811 ^ � � � v��7M��'� � ^ ���a� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���`� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���_� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��^� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��[� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��Z� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���Y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���X� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665� ��W� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��Vq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��U�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��T�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��S�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811 D T" � � .� A���E4 D �k��p�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��n� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��m� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��l� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��k� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��j� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���h{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���g� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903�0��f�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��e�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��d�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��c� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��b{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � a( i � � , Wn��1A�B� � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���~�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��}�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��|� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��{� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��y� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��x� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���w� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��v� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��u� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��t� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��s� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��r� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���q�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963 B J [ � � � * `��=���B �P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809 � � � � e��� � �n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 9 d \ � � �[�B�S�j � 9 �"��+o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���*s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��)o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��(oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��'wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��&�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�w��%� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���$�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��#�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���"q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��!�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 | � �" � & � T K � } C�.�U�y���7�E�7 � | \��IwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��Hu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��Gw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��Fw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��Ew{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��Dws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��Cw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��Bw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��Au�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���@w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��?wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��>w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��=y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��<wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��;w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��:wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��9�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��8w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��7sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��6sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��5sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���4s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��3sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��2ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���1q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��0sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���/s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��.sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��-sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��,W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache � g � � j � j � 9 � � -�f�7�7�=�F��'� h � v��hq�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��go�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��fo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���eo�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��doE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��cqG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��bqU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��aqy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��`q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��_�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��^o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��]oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��\o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��[iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��Zoy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��YoM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��XoY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��WmQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��Vo��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��Uoc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��To}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��Sq�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���Ru�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��Qw�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��Pw� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��Ow{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��NwE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��Mu�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��Lw-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��KwA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���Jw�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm � � a � � ' � @�"�@��g�� : � ���~q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��}q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��|o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���{q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��zq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��yo�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��xq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��wq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��vo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��uo�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��to� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��soi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��ro�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���qq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��pq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��oq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���n���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��mqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��lq]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��kq�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��jq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��iq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changes p eB o � � ��\�i�1��h�� � p � ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� �� }� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!�� }�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301��� }� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h�� oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� �� o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$���K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� �� }�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260 � i � n � $ � ,���\j�2�A � � ��(o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���'o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��&o_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��%o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��$}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��#}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��"q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��!�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571��� q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h�� qc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��qs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��q�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378 � c � g � � � Iq�qE�S � ���:}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��9}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��8}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��7}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��6}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��5}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��4}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��3}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��2}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��1}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��0}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��/}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��.}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��-}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��,o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���+o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��*om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���)}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657 y � ` � � l ? ���Er�F�� �+ y �-��O}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��N}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��M}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���L}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��K}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��J}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��I}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��H�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��Gs�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��F}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��E}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���D}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��C}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��Bg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��Agc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��@}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��?}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��>}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���=}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���<}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��;}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108 f L� n y � � D �k� �gq�9s f ���bo�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��ao��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���`}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���_}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��^}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��]}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��\}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��[}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��Z}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��Y}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��X}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��W}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��V}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��U}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��T}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���S}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��R}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��Q}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��P}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423 � i� u � % r �9g��%�� M � �-��u�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��t�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��sq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��rq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��qi�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��p�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���o�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��n��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��m� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��lq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��kq{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��j�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��i�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��h�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��g�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��f�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��e}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��do�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���c}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258 � r � U � � 9 { ���Br�o�a � ����%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O���!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���~�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��|�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��{�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��z�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��y�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��x�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��w�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��vq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224 � �1 C � � ��a�K�R� w� � �=����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��s�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��m�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��q[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'����M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774��� �9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x�� i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N�� i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306 � S � � ' 0 � o�-b�^�*. � |��-}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��,�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��+�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��*q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��)�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���(�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��'�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���&�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��%�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��$q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��#�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���"�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��!�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&�� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509 � 0o � � � �'wZ��O�? � �#��>�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��=�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���<�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���;�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��:�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��9�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���8q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��7�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��6��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��5�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���3�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���2�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��1�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���0�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��/�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��.q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207 � P� � ( r � 7 � �c�� � �$��M�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��L�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��K�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��J�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���I�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��Hq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��G�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��F�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��E�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��D�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��C�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���B� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S��A�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��@q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��?�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766 � �4 � � e | � �� y��C� 3� � x��cu�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���b�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���a�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��`�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���_�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��^�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��\� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��[�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���Z�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��Y�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��X�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���W�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��V�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��U�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��T�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���S��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��Ru�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��Q�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��P�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��O�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��N� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700 l�C � l | ��9��3� �X��s�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��r� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��qq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��pq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��n��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��m�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��l�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��k�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��j�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���i�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��h�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���g�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��f�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���e��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���d�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249 I � � 0 b�5��$j� ��I �0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817����� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��~� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��}��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��|s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��{s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��z�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��ys�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��x��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���w�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��vq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��u� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��t�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ���=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q�� �%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~�� ��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� �� �=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3�� � �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241��� m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)���U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"���G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��$��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��#�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��"�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��!�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452��� � �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j�� �W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U���-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s���i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��7�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��6� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���5��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��4� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��3� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��2� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���1�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��0�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���/�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��.�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���-� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��*� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��)� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���(� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��%� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��K� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��J� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��H� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���G� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��F� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���D� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��C� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��B�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��A�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��@� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���?� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���>� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���=� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���;� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��:� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���9� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��8� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��]� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��\q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��[�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��Z�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��Y�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��W� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��V� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���U� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��R� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��Q{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��P� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��O� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��M� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��L� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��l�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��k�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��j�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��i� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��h{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���g� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���f� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���e� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��d� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��c� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��a� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��`� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���_� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���^� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��|� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��{� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��x� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���w�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��v�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��u� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��t� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��s� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��r� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��q� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��p� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���n{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���m� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�� � �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�� � �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��~� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���}� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��'�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��&� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���%� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���$�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��#�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��"� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��!� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ���/� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���.�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��-�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��,� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��+� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���*�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��)�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���(q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��8�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��7� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�X��6�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��5� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���4�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��3�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���2q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��1�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��0� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��A�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��@� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���?�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��>�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���=q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��<�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��;� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���:� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���9�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � � � (/�K � �w��J� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���I�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��H�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Gq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��F�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��E� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���D� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���C�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��B�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � # � v��� ���Rq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��Q�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��P� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���O� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���N�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��M�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�5��L�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��K�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array" K � 9 ���/�\�D� �T � K p��bsq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���as�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��`sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��_sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��^W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��]o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���\s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��[o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��ZoC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��Ywu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��X�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5��W�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)�X��V�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��U� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���T�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��S�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � x � � , � ] � � � �$�f�;���B�.�5�� � �f��u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��~w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��}wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���|w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��{wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��zu=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��yw�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��xw/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��ww{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��vws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��uw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��tw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��su�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���rw��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��qwO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��pw7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��oy��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��nwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��mw[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��lwa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"��k�1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��jw��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��ism�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��hsC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��gsk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���fs��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��esO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��due�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���cq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballs � �%� o � P � c � < � m�ms�|�]�B�$�+ � �!�� q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4�� q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ���+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U�� iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr�� oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\�� oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb�� oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]�� mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\�� wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output � �<� � w � / � ��]�1�-��N�� � �N��3}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��2}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���1}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���0q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��/q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��.o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���-q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��,q��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��+o�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��*q�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��)q��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��(o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��'o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��&o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��%oi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��$o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���#q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��"q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��!q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure��� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW�� qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese�� q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir o W� � % � � � � � T�%K���t�j � o � ��J}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��I}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���H}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��G}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��F}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��E}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��D}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��C}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��B}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��A}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���@}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��?}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��>}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���=}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��<oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��;o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��:o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���9q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��8o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��7}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���6q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��5s��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��4�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260 � � * � J � b Zh��D�[�1�$ � ���]o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��\om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���[}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��Zo�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���Yo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��Xo_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��Wo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��V}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��U}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��Tq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��S�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���Rq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��Q�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��P�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���O��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��Nqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��Mqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��L{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��Kq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077 � P & 5 � � b�� �O��M[@ � ���o}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���n}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��m}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���l}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��k}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��j}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��i}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��h}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��g}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��f}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��e}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��d}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��c}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��b}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��a}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��`}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��_}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��^o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754 � G� � � : 6 ��Y�VH�>�e�' � ���}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o�� }e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���~}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��}}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��|}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��{}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4��z�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��ys�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��x}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��w}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���v}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��u}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��tg� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��sgc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��r}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��q}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��p}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108 5 � � H � I � "�j��a� �7��}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&�� }�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/�� }�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1�� }�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423 u W � T � Izf���/}� u �u��)�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��(q�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��'�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��&�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��%q�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��$q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��#i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��"�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���!�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<�� q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t�� q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ���;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037 ]� � A � � � � Jzw�i�� x��<i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��;i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���:�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��9�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��8�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��7��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��6i}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��5i�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��4�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��2�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���1�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���0�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��/�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��.�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��-�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��,�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��+�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��*�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736 o r � ~ � � 0�[�!��Fl� � o � ��O��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��N�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��M��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��Ls�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��Km�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��J�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��Iq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��H�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���G� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��F�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��Eq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��D�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��C�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��B�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��@��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��?���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���>�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��=�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848 � b k � � � h ���I�ei�X � ���b�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��a�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��`q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��_}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��^�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��]�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��\q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��[�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���Z�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��Y�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���X�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��W�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��Vq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��U�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���T�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��S�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��R�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��Q�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��P�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 q A� D P ���x�h�I q �S��s�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��rq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+��q�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#��p�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k��o�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766���n�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233���m�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8��l�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*��k�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���jq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+��i�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B��h��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(��g�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H��f��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017���e�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641���d�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:��c�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260 � w� e � � O3��>I � �'���Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5���m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� �� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4��~�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6��}�o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|��|�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� ��zq�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#��y�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z��x�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ��w�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2��v�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1��u�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���t� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766 � Lz � � L � D ��I����r�I � ����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ���?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249����#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q���%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249����!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!���E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y�� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;�� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032��� �!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/���a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249�����/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/���a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700 f Z� � � K � � l-�;^f �s��&�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��%�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��$� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��#q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��"q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� �� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X�� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!���E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249 A � � ( Z � - �� b���A �0��5�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��4�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��3�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��2�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���1�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��0� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��/��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��.s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��-s�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��,�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��+s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��*��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���)�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��(q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��'� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��C�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���B�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��A��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��@��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��?�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��>��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��=�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��<� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���;m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��:m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��9��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��8�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��7�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��6�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��V��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��U�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��T�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��S�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���Q� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��P�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��O�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��L�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��K�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���J� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��I�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��H�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��G��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��F��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���E�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��D�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4��i�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��h� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753���g��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��f� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��e� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��d� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753���c�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-��b�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���a�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��`�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���_� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��\� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��[� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���Z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���Y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��W� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A��}� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��|� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��z� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��x� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���v� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��u� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ��t�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1��s�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��r� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���p� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���o� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��l� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���k� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��j� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%�� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p�� �c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��~� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0�� �c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��.� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��-� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��,� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��+� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��*� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���)�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��(�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��&� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��%� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��$� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��#� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��"� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��� {� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690��� � �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���@�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��?� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��=� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��<� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��;� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��:� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��9� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��8� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���7��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���6�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��5�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��4� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��3� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��2� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��1� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��0� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���/� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 q dX � � w � ���|B�q � ��O��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��N� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��M� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��L�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��K� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���J�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��I� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��H� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��G� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��F� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��E� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��D� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��C� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���A�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 : p � � � ���3: �t��Y�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��X� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���W� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���V�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��U�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��T� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��S� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��R�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��Q�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��P��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � � � ��B� � ���a� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���`�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458�n��_�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��^� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�w��]� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���\�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��[�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���Zq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 � ?F ) � b� � �n��i�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�X��h�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��g� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���f�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��e�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���dq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��c�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��b� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e d \ � � �[�Be �X��r�-��Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 1:1.8.0.412.b08-1.tuxcare.els1f<��- Upgrade to shenandoah-jdk8u412-b08. That fixes the following CVEs: - CVE-2024-21011: Denial of service due to long Exception message logging - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: Unauthorized data modification due to C2 compilation failure with "Exceeded _node_regs array"�w��q� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���p�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��o�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���nq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��m�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��l� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���k� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���j�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � � O � | � d � @ � t�k�t�:� Y�� � �� y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj�� wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg�� w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"���1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C��w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn��sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY��sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm��sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk�� ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��~sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���}s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��|sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��{sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy��zW� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache�"��yo�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���xs��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��wo�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��voC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��uwu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��t�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�5��s�+�?�Koba Karaputadze <kkaraputadze@cloudlinux.com> - 1:1.8.0.422.b05-1.tuxcare.els1f�J�- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE) ! � �B� � e � s e � � _t���<�Y�v�:�? � � R��,o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��+oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��*o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��)iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��(oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��'oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��&oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��%mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��$o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��#oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��"o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��!q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source��� u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� �� w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� �� w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w�� w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\�� wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP��w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z��wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY���w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm\��wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW��u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega�� wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU�� w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106 � \�e � F � + � � n�4�M�/�M � ~��Do��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��Co�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��Bo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��Aoi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��@o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���?q�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��>q)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��=q�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���<���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��;qA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��:q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��9q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��8q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��7q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changesv��6q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��5o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��4o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���3o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��2oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��1qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��0qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��/qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��.q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��-�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild � ;� � V � N | � V 3`��p���M�Z�" � ���\}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��[}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��Z}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���Y}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��Xoe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��Wo�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��Vo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���Uq�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��To� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��S}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���Rq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��Qs��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��P�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��O}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��N}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���M}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260���Lq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��Kq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��Jo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���Iq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��Hq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��Go�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��Fq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��Eq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260 8 &� � ] O a � E�J�t �[�� � 8 v��pq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��o�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���nq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��m�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��l�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��jqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��iqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��h{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��gq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��f}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��e}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���d}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378� ��c}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��b}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��a}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��`}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��_}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��^}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��]}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378 V V � m � C � 6����_�� T V �y��}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#�� }�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��~}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��}}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��|}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��{}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+��zo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���yo�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��xom�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���w}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657� ��vo�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���uo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��to_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��so� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��r}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��q}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163 Z ^2 � � @ � � � H� ��;7�� Z �4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;�� }�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4�� }�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108��� }�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108��� }�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m�� }�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)��}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0��}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'��}�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� ��}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754 P �� � c � r � � � .9c�v+w�P x��*}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��)}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��(}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��'}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��&}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��%}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��$}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��#}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��"}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���!}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;�� }�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z�� }{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/�� }�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423�-�� }�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o�� }e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o��}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665 n � � H � � � ?���K��H�= n �J��<��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��;� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��:q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��9q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��8�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��7�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��6�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��5�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��4�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��3}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��2o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���1}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258���0o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��/o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���.}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���-}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��,}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��+}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322 � � � Z s � u�X��<~�� � �)��N�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���M�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���L�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��K�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��J�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��I�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��H�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��G�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��F�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��E�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��Dq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224�-��C�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��B�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��Aq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��@q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��?i�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��>�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���=�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857 / /[ � � � z ��'�����E � / d��aq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��`�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��_�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��^�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��\��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��[���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���Z�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��Y�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��Xi� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��Wi�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306���V�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��U�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��T�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��Ri}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��Qi�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��P�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��O��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948 A� w � , R ��Ub���=� �)��s�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��rq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��q�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���p�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��o�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��n�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��m�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��l�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��j�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509�=��i��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��hs�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��gm�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��f�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��eq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��d�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���c� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��b�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417 � � $ � � a � � /_�G�J V � �+���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(���S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260���~�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<��}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��|q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207|��{}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w��z�q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1��y�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��xq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��w�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���v�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��u�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���t�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207 � 4 w � 8 � p��H��6W� � ��q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S���)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766�#�� �I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766��� �9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233��� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8���s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*���W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233 R � c �����N��+B� � R ���%�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��$�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��#�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��"�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���!��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M�� u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/�� �a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5�� �m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� �� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700�$���K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6���o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700 ; @� � E � } � ~n�E� n~� � ; �<��;�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��:�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��9�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��8�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���7�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��6�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���5�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��4�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���2�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249x��1u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���0�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���/�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��.�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���-�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��,�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��+��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��*� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��)�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���(�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��'�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��&�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032 c q� � � �����6� c �!��Is�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��H�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��Gs�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��F��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���E�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��Dq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��C� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��B�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817�X��A�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��@� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��?q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��>q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��=��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��<��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817 � 9� � O { I o ���?��\ � � ��Y�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��X� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���Wm�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��Vm��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��U��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��T�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��S�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��R�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577�0��Q�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��P�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��O�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��N�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���M�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��L� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��K��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��Js��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817 ^ } � � � � JR�(�3G�� � ^ � ��i��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��h�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��g�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���f� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��e�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��d�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��b��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���a�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��`�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468� ��_�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���^�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��[�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��Z��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468 q� � 4 k � � D ��H� $��eg� �-��~�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928���}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y��|�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109���z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��x� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��w� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���v� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���u� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��s� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932� ��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��q�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��p�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��o�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���m� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��l�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��k�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��j��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452 �% �������������������{tmf_XQJC<5.' ������������������xjc\UNG@92+$ � � � � � � � � � � � � � � � � � � | u n g ` Y R K D = 6 / ( ! � � � � S L E > 7 0 ) " � � � � � � � � � � � � � � � � � � � z s l e ^ W P I B ; 4 - & � � � � � � � � � � � � � � � � � � ~ w p i b [ T M F ? 8 1 * # ������������������{tmf_XQJC<5.' ������������������xqjc\UNG@92+$ ������������������|ung`YRKD=6/(! �������������������yrkd]VOHA:3,% � � � � � � � � � � � � � � � y r k d ] V O H A : 3 , % � � � � � � � � � � � � � � � � � � } v o h a Zq ������������������}vohaZSLE>70)" ��������������� � ���` ���M ���8 ���# ��� ���} ��g ~��K }��+ |�� {�� z�� y��} x��q w��] v��L u��< t��, s�� r�� q��q p��` o��Q n��D m��. l�� k�� j��{ i��h h��V g��D f��1 e�� d�� c��u b��a a��K `��/ _�� ^��| ]��s \��j [��a Z��U Y��A X��0 W�� V�� U��| T��i S��U R��D Q��5 P��( O�� N�� M��r L��_ K��L J��: I��( H�� G�� F��k E��Y D��E C��/ B�� A��s @��` ?��W >��N =��E <��; ;��* :�� 9�� 8��y 7��e 6��R 5��= 4��- 3�� 2�� 1��y 0��j /��Y .��G -��5 ,��" +�� *��~ )��j (��V '��D &��0 %�� $�� #��_ "��F !��= ��5 ��- ��# �� �� ��r ��c ��Q ��= ��* �� �� ��z ��m ��V ��G ��6 ��# �� ��} ��k ��Y ��C ��1 �� �� ��q ��S ��6 ��& �� �� �� ��� ���{ ���q ���b ���P ���@ ���1 ��� ��� ���x ���e �W �G �7 �! � o 탭\ 샭I 냭6 ꃭ# 郭 胬| 烬i 惬R 僬< 䃬 ル ⃫q ძg �V ߃�D ރ�5 ݃�% ܃� ڃ�~ ك�i �Y ׃�I փ�; Ճ�% ԃ� Ӄ� ҃�s у�a Ѓ�N σ�< �* ̓� ̃� ˃�p ʃ�\ Ƀ�D ȃ�, ǃ� ƃ�r Ń�i ă�a Ã�Y �O ���@ ���. ��� ��� ���} ���i ���V ���C ���5 ���& ��� ��� ���s ���b ���O ���< ���) ��� ��� ���o ���] ���J ���3 ��� ��� ���b ���R ���J ���A ���8 ���/ ���' ���z ���g ���R ���@ ���- ��� ��� ���a ���C ���5 ���) ��� ��� ���t ���d ���P ���= ���) ��� ��� ���| ���f ���W ���F ���3 ��� ��� ���| ���i ���T ���? ���- ��� ��� ���g ���G ���4 ���+ ���" ��� ��� ���y ���h ���X ���H ���4 ���! ��� ���| ���m ���` ���J ���; ���* ��� ��� ���r ��� ��� ���| ���l ���] ���K ���7 ���$ ��� ��� ���s ���c ���M ���> ���- ��� ��� ���u ���b ���O ���: ���( ��� ���~ ���h ���I ���+ ��� ��� ��� ���p ���a ���Q ���= ��* ~�� }�� |��u {��g z��Q y��B x��1 w�� v�� u��z t��h s��V r��B q��. p�� o�� n��p m��X l��7 k�� i�� ��� h�� g�� f��{ e��l d��Z c��J b��; a��) `�� _�� ^��o ]��a \��R [��E Z��. Y�� X�� W��{ V��h U��U T��C S��1 R�� Q�� P��v O��_ N��I M��+ L�� K��~ J��v I��m H��d G��[ F��S E��I D��: C��( B�� A�� @��w ?��c >��P =��= <��/ ;�� :�� 9��y 8��j 7��Y 6��G 5��4 4��! 3�� 2��{ 1��f � �, � f -�Pe�;�|� { � �A��� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C��� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557�4���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"��� �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7�� � �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874 x h � � U � � d�+�l�&��C x �F��%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��$� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���#� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���"� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,�� � �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%�� {�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B�� � �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I�� � � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811�A��� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`��� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811 ^ � � � v��7M��'� � ^ ���5� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���4� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���3� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��2� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��1� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��/� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��.� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���-� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���,� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665� ��+� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��*q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��)�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��(�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��'�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811 D T" � � .� A���E4 D �k��D�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��B� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��A� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��@� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��?� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��=� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���<{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���;� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903�0��:�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��9�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��8�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��7� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��6{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � a( i � � , Wn��1A�B� � �:��V� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��U� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���R�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��Q�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��P� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��N� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��M� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��L� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���K� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��J� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��I� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��H� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��G� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��F� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���E�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963 B J [ � � � * `��=���B �P��g� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���f�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��e� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��d� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��c� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��b� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��a� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��`� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��_� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���]�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���\�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��[� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��Z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��Y� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��X� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��W� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809 � � � � e��� � �n��q�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111�f��p� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��o� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��n�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,��m�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��j� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��h�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 9 d \ � � �[�B�S�j � 9 �"��o�W�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87Q�@- Update to b87 - Remove all rhino support; use nashorn instead - Remove upstreamed/unapplied patches���~s��Karsten Hopp <karsten@redhat.com> 1:1.8.0.0-0.4.b79Qvw�- update java-1.8.0-openjdk-ppc-zero-hotspot patch - use power64 macro� ��}o�%�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.3.b79QT0�- Add build fix for zero - Drop gstabs fixes; enable full debug info insteadW��|oC�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.2.b79Q@j@- Fix alternatives priorityt��{wu�Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.1.b79.f19Q?�- Update to jdk8-b79 - Initial version for Fedora 19s��z�c�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.0-b53.1PE�@- Initial build from java-1.7.0-openjdk RPM�w��y� �Q�Pavel Mayorov <pmayorov@cloudlinux.com> - 1:1.8.0.402.b06-1.tuxcare.els1e���- Upgrade to shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop optimization issue - CVE-2024-20926: Arbitrary Java code execution in Nashorn - CVE-2024-20945: Logging of digital signature private keys - CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS - Remove JDK-8312489 patch which is already in the sources���x�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��w�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577���vq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��u�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��t� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106���s� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���r�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 | � �" � & � T K � } C�.�U�y���7�E�7 � | \�� wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.27.b129S ��- Fix non-headless librariesW�� u=�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.26.b129S ��- Fix incorrect Requires�4��w�s�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Add -headless subpackage based on java-1.7.0-openjdk - Add abrt connector support - Add -accessibility subpackageQ��w/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129R���- Update to b129.w��w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.25.b126R��- Update to candidate Reference Implementation release.s��ws�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.24.b123R�@- Forward port more patches from java-1.7.0-openjdkU��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.23.b123R��- Update to jdk8-b123U��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.22.b115R��@- Update to jdk8-b115� ��u�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.21.b106Rp�- added jre/lib/security/blacklisted.certs for aarch64 - updated to preview_rc2 aarch64 tarball���w��Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.20.b106RQP�- Fix paths in tapsets to work on non-x86_64 - Use system libjpega��wO�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.19.b106R(rA- Fix with_systemtap conditionalsU��w7�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.18.b106R(r@- Update to jdk8-b106��y��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.17.b89xR �- Updated aarch64 to latest head - Dropped upstreamed patchesj��wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR6�- The zero fix only applies on b89 tarballg��w[�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xR �@- Add patch to fix zero on 32-bit buildj��wa�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.16.b89xQ���- Added additional build fixes for aarch64�"�� �1��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.0-0.16.b89xQ��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�C�� w��Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89Q��@- Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch) - Added --disable-precompiled-headers for arm64 buildn�� sm�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.14.b89Q�Y@- added patch 301 - removeMswitchesFromx11.patchY�� sC�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.13.b89Q�d�- added new aarch64 tarballm�� sk�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.12.b89Q�@- ifarchaarch64 then --with-jvm-variants=client���s��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89Q�pB- prelink dependence excluded also for aaech64 - arm64 added to jitarches - added source100 config.guess to repalce the outdated one in-tree - added source101 config.sub to repalce the outdated one in-tree - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent) - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent) - added gcc-c++ build depndece so builddep will result to better situation_��sO�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.10.b89Q�pA- moved to latest working osurcesk��ue�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.10.b89Q�p@- Moved to hg clone for generating sources.���q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- added aarch 64 tarball, proposed usage of clone instead of tarballsp��sq�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��A- Switch to xz for compression - Fixes RHBZ#979823���s�/�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.9.b89Q��@- Priority should be 0 until openjdk8 is released by upstream - Fixes RHBZ#964409c��sW�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.8.b89Q��@- Fix incorrect permissions on ct.syma��sS�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.7.b89Q�@- Fix incorrect permissions on jarsy�� W� �Adam Williamson <awilliam@redhat.com>Q��@- update scriptlets to follow current guidelines for updating icon cache � g � � j � j � 9 � � -�f�7�7�=�F��'� h � v��<q�Omair Majid <omajid@redhat.com> - 1:1.8.0.11-8.b12S�R@- Modify aarch64-specific jvm.cfg to list server vm first� ��;o�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-7.b12S� �- removed legacy aarch64 switches - --with-jvm-variants=client and --disable-precompiled-headers|��:o� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-6.b12S��- added patch patch9999 enableArm64.patch to enable new hotspot���9o�?�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-5.b12S��- Attempt to update aarch64 *jdk* to u11b12, by resticting aarch64 sources to hotpot onlyX��8oE�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-1.b12S��- updated to security u11b12Z��7qG�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-13.b13S�h@- Obsolete java-1.7.0-openjdka��6qU�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-12.b13S�@- Use system tzdata from tzdata-javas��5qy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S��@- Add patch from IcedTea to handle -j and -I correctly|��4q� �Omair Majid <omajid@redhat.com> - 1:1.8.0.5-11.b13S�D�- Backport javadoc fixes from upstream - Related: rhbz#1107273� ��3�+��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.0.5-10.b13S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildR��2o9�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-9.b13S�g@- Build with OpenJDK 8Z��1oI�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-8.b13S��- Backport fix for JDK-8012224� ��0o�M�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-7.b13S��- Require fontconfig and minimal fonts (xorg-x11-fonts-Type1) explicitly - Resolves rhbz#1101394U��/iE�Dan Horák <dan[at]danny.cz> - 1:1.8.0.5-6.b13S8@- Enable build on s390/s390xr��.oy�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-5.b13S{C�- Only check for debug symbols in libjvm if it exists.\��-oM�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13Su��- Include all sources in src.zipb��,oY�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-4.b13S^B�- Check for debug symbols in libjvm.so]��+mQ�Brent Baude <baude@us.ibm.com> - 1:1.8.0.5-3.b13SX��- Add ppc64le support, bz# 1088344~��*o��Omair Majid <omajid@redhat.com> - 1:1.8.0.5-2.b13SW�@- Build with -fno-devirtualize - Don't strip debuginfo from filesg��)oc�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SNp�- Instrument build with various sanitizers.t��(o}�Omair Majid <omajid@redhat.com> - 1:1.8.0.5-1.b13SM @- Update to the latest security release: OpenJDK8 u5 b13�"��'q�U�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132S5d@- Include version information in desktop files - Move desktop files from tarball to top level source���&u�A�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-1.0.b132S1o�- Switch from java8- style provides to java- style - Bump priority to reflect java version� ��%w�%�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.35.b132S,)�- Disable doclint for compatiblity - Patch contributed by Andrew John Hughes� ��$w� �Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.34.b132S ��- Include jdeps and jjs for aarch64. These are present in b128.w��#w{�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.33.b132S �@- Update aarch64 tarball to the latest upstream release\��"wE�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.32.b132S��- Fix `java -version` output�f��!u�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132S��- updated to rc4 aarch64 tarball - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch patch2021 system-libpng-aarch64.patchP�� w-�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.30.b132ScA- Update to b132Z�� wA�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.29.b129Sc@- Fix typo in STRIP_POLICY��� w�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.28.b129Sn�- Remove redundant debuginfo files - Generate complete debug information for libjvm � � a � � ' � @�"�@��g�� : � ���Rq� �Omair Majid <omajid@redhat.com> - 1:1.8.0.20-6.b26T=A- Revert to building against java-1.8.0-openjdk - Resolves: rhbz#1125260�M��Qq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26T=@- Update aarch64 hotspot to latest upstream version - Depend on java-1.7.0-openjdk to work around self-building issues - Resolves: rhbz#1125260~��Po��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T �@- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260���Oq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-3.b26T ��- Update aarch64 hotspot to latest version - Resolves: rhbz#1125260z��Nq��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-2.b26T ��- Enable jit for all ppc64 variants - Resolves: rhbz#1125260�P��Mo�3�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26T ��- moving all ppc64 to jit arches - using cpp interpreter for ppc64le - removing requirement on datadir/javazi-1.8/tzdb.dat - Resolves: rhbz#1125260� ��Lq�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.20-1.b26T ��- Switch back to 8u20 - Build using java-1.7.0-openjdk - Resolves: rhbz#1125260�@��Kq��Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26TT@- Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK - Do not obsolete java-1.7.0-openjdk - Resolves: rhbz#1125260~��Jo��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-4.b26T�- forcing build by itself (jdk8 by jdk8) - Resolves: rhbz#1125260� ��Io�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-3.b26T�- fixed RH1136544, orriginal issue, state of pc64le jit remians mistery - Resolves: rhbz#1125260�;��Ho� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��- adapted aarch64 patch - removed upstreamed patch 0001-PPC64LE-arch-support-in-openjdk-1.8.patch - added patch666 stackoverflow-ppc32_64-20140828.patch - commented out patch2 1015432.patch (does nearly the same as new patch666) - Resolves: rhbz#1125260j��Goi�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02S��A- updated to u40-b02 - adapted aarch64 patches�+��Fo�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01S��@- updated to u40-b01 - adapted rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch - adapted jdk8042159-allow_using_system_installed_lcms2.patch - removed patch8 set-active-window.patch - removed patch9 javadoc-error-jdk-8029145.patch - removed patch10 javadoc-error-jdk-8037484.patch - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it���Eq�7�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-19.b12S�<@- fixed desktop icons - Icon set to java-1.8.0 - Development removed from policy toolK��Dq)�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-18.b12S��- fixed jstack�]��Cq�K�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12S��- added build requires and requires for headles _datadir/javazi-1.8/tzdb.dat - restriction of tzdata provider, so we will be aware of another possible failure���B���Fedora Release Engineering <rel-eng@lists.fedoraproject.org>S�G�- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_RebuildW��AqA�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-15.b12S�- fixed provides/obsolatese��@q]�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-14.b12S��- forced to build in fully versioned dir�!��?q�S�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-13.b12S��- fixing tapset to support multipleinstalls - added more config/norepalce - policitool moved to jre�4��>q�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12S��- bumped release to build by previous release. - forcing rebuild by jdk8 - uncommenting forgotten comment on tzdb link�;��=q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12S��- backporting old fixes: - get rid of jre-abrt, uniquesuffix, parallel install, jsa files, config(norepalce) bug, -fstack-protector-strong, OrderWithRequires, nss config, multilib arches, provides/requires excludes - some additional cosmetic changes p eB o � � ��\�i�1��h�� � p � ��i}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Actually add test case Java file. - Resolves: rhbz#1194378�i��h}�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build. - Add property test case from java-1.7.0-openjdk build. - Resolves: rhbz#1194378� ��g}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build. - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7. - Print contents of hotspot-spec.gmk - Resolves: rhbz#1194378s��f}m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�~�- Fix path to spec.gmk. - Resolves: rhbz#1194378�+��e}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-C- Print contents of spec.gmk to see what is being passed to the HotSpot build. - Resolves: rhbz#1194378� ��d}�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-B- Remove patch to generated-configure.sh as RPM re-generates it. - Resolves: rhbz#1194378�U��c}�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-A- Fix configure script to use ppc64le, not ppc64. - Add ppc64le support to LIBJSOUND_CFLAGS. - Add a jvm.cfg for ppc64le - Resolves: rhbz#1194378���b}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13T�-@- Report ppc64le as the architecture on ppc64le, not ppc64. - Resolves: rhbz#1194378� ��a}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-3.b13T�}�- Depend on java-1.7.0-openjdk to build instead. - Resolves: rhbz#1194378�!��`}�G�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-2.b13T��@- Replace unmodified java.security file via headless post scriptlet. - Resolves: RHBZ#1180301���_}� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.31-1.b13T��- Update to January CPU patch update. - Resolves: RHBZ#1180301h��^oe�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-5.b17T�p@- epoch synced to 1 - Resolves: rhbz#1125260� ��]o�O�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-4.b17TJ?A- updated aarch64 sources - all ppcs excluded from classes dump(1156151) - Resolves: rhbz#1125260�z��\o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17TJ?@- added patch12,removeSunEcProvider-RH1154143 - xdump excluded from ppc64le (rh1156151) - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com) - Resolves: rhbz#1125260���[q�3�Omair Majid <omajid@redhat.com> - 1:1.8.0.25-3.b17TG�@- Do not provide JPackage java-* provides. (see RH1155783) - Resolves: rhbz#1155786{��Zo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-2.b17TD�@- ec/impl removed from source tarball - Resolves: rhbz#1125260h��Y}W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.25-1.b17T2�@- Update to October CPU patch update.���Xq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-11.b26T$�- Fix rpmlint warnings about vectoriesed ppcs - Resolves: rhbz#1125260�9��Ws��Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26T$�- Remove LIBDIR and funny definition of _libdir. - Fix rpmlint warnings about macros in comments. - Resolves: rhbz#1125260�$��V�K�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-10.b26T A- BR changed to java-1.8.0-openjdk in order to verify build by itself. - Resolves: rhbz#1125260�N��U}�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26T @- Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in the bytecode verifier on ppc/ppc64. - Resolves: rhbz#1125260� ��T}�A�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26T �- Add patches for PPC zero build. - Fixes stack overflow problem. See RHBZ#1015432. - Fixes missing memory barrier in Atomic::xchg* - Fixes missing PPC32/PPC64 defines for Zero builds on power. - Resolves: rhbz#1125260���S}�1�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-7.b26Tw�- Remove ppc/64 patches. - Build with java-1.7.0-openjdk. - Resolves: rhbz#1125260 � i � n � $ � ,���\j�2�A � � ��|o�M�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-6.b27V C�- removed link to soundfont. Unused in rhel7 and will be fixed upstream - Resolves: rhbz#1257653���{o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-4.b27U�- priority aligned to 7digits (sync with 6.8) - Resolves: rhbz#1255350e��zo_�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b27U�M@- updated to u60 - Resolves: rhbz#1255350|��yo� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.51-2.b16U���- doubled slash in md5sum test in post - Resolves: rhbz#1235163�3��x}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16U�y@- Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version. - Resolves: rhbz#1235163�m��w}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16U�'�- July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60. - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea. - Re-generate EC disablement patch following CPU DH changes. - Resolves: rhbz#1235163v��vq�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13US<�- added build requires on tzdata - Resolves: rhbz#1212571�m��u�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13US<�- Correctly fix system timezone data issue by depending on correct tzdata version. - Remove reference to tz.properties which is no longer used. - Resolves: rhbz#1212571���tq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13U@�- Make use of system timezone data for OpenJDK 8. - moved to boot build by openjdk8 - priority set gcj < lengthOffFour < otherJdks (RH1175457) - misusing already fixed bug - Resolves: rhbz#1189530�*��s�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13U@�- Omit jsa files from power64 file list as well, as they are never generated - Resolves: rhbz#1202726�(��r�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-33.b13U>$�- -Xshare:dump is not implemented for the PPC JIT port (both ppc64be & le) - Resolves: rhbz#1202726���q��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-32.b13U4�@- Use the template interpreter on ppc64le - Resolves: rhbz#1213042h��pqc�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-31.b13U'�@- repacked sources - Resolves: RHBZ#1209077p��oqs�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13U&i�- do not obsolete openjdk7 - Resolves: rhbz#1210006{��n{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-28.b13U#�- Fix filenames broken by sync - Resolves: rhbz#1209077�R��mq�5�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13U#�- updated to security u45 - minor sync with 7.2 - generate_source_tarball.sh - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch - reworked (synced) zero patches (removed 103,11 added 204, 400-403) - family of 5XX patches renamed to 6XX - added upstreamed patch 501 and 505 - included removeSunEcProvider-RH1154143.patch - returned java (jre only) provides - repacked policies (source20) - removed duplicated NVR provides - added automated test for priority (length7) - Resolves: RHBZ#1209077� ��l}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-7.b13U h�- Set archinstall to ppc64le on that platform. - Resolves: rhbz#1194378�f��k}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13T��- Adjust ppc64le HotSpot patch for OpenJDK 8. - Enable AArch64 configure/JDK patch on all archs to minimise patching issues. - Adjust ppc64le patches to apply after the enableAArch64 patch. - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Resolves: rhbz#1194378���j}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-5.b13T��@- Provide AArch64 version of RH1191652 HotSpot patch. - Resolves: rhbz#1194378 � c � g � � � Iq�qE�S � ���}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�@- Update to u72b15. - Drop 8146566 which is applied upstream. - Resolves: rhbz#1307108�)�� }�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15V��- Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897. - Resolves: rhbz#1146897�0�� }�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15V���- Backport S8148351: Only display resolved symlink for compiler, do not change path - Resolves: rhbz#1256464� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V�=@- Resetting bootstrap after successful build. - Resolves: rhbz#1146897�'�� }�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15V��- Remove -fno-tree-vectorize now a GCC is available with this bug fixed. - Add build requirement on a GCC with working tree vectorization. - Enable bootstrap temporarily to ensure the JDK is functional. - Resolves: rhbz#1146897� �� }�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-3.b15V��@- Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295754�y��}�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15V���- Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp - Resolves: rhbz#1295754�3��}�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<E- Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp - Resolves: rhbz#1295754�#��}�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<D- Change correct specifier in src/share/vm/memory/blockOffsetTable.cpp - Resolves: rhbz#1295754�S��}�+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<C- Make bootstrap build optional and turn it off by default. - Fix remaining warnings in s390 fix and re-enable -Werror - Resolves: rhbz#1295754�N��}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<B- Add additional fixes for s390 warnings in arguments.cpp - Temporarily turn off -Werror on s390 to make progress - Resolves: rhbz#1295754|��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<A- Actually apply the S390 fix... - Resolves: rhbz#1295754�l��}�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V�<@- Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed. - Add patch for size_t formatting on s390 as size_t != intptr_t there. - Resolves: rhbz#1295754�%��}�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15V��- October 2015 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32. - Update patch documentation using version originally written for Fedora. - Drop prelink requirement as we no longer use execstack. - Drop ifdefbugfix patch as this is fixed upstream. - Temporarily enable a full bootcycle to ensure flag changes don't break anything. - Resolves: rhbz#1295754�+�� o�i�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17V��- moved to integration forest - sync with fedora (all but extracted luas and family) - Resolves: rhbz#1295754���o�!�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-3.b17V$�@- bumped release X.el7_1 is obviously > X.el7 :-/ - Resolves: rhbz#1257657l��~om�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-1.b17V �- moved to bundled lcms - Resolves: rhbz#1257657���}}�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17V �@- October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs on AArch64. - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs. - Resolves: rhbz#1257657 y � ` � � l ? ���Er�F�� �+ y �-��#}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @A- Use basename of test file to avoid misinterpretation of full path as a package - Resolves: rhbz#1325423o��"}e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W @@- Update to u91b14. - Resolves: rhbz#1325423z��!}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�A- Fix typo in test invocation. - Resolves: rhbz#1245810��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-3.b03V�@- Add ECDSA test to ensure ECC is working. - Resolves: rhbz#1245810� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03V���- Avoid WithSeed versions of NSS functions as they do not fully process the seed - List current java.security md5sum so that java.security is replaced and ECC gets enabled. - Resolves: rhbz#1245810� �� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-1.b03V�A- Bump release so 7.3 stays greater than 7.2.z - Resolves: rhbz#1320665o�� }e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03V�@- Update to u77b03. - Resolves: rhbz#1320665�4�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16V�'@- When using a compositing WM, the overlay window should be used, not the root window. - Resolves: rhbz#1176206�N��s�+�Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15V�2�- Use a simple backport for PR2462/8074839. - Don't backport the crc check for pack.gz. It's not tested well upstream. - Resolves: rhbz#1307108� ��}�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Fix regression introduced on s390 by large code cache change. - Resolves: rhbz#1307108�+��}�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16V�2�- Update to u72b16. - Drop 8147805 and jvm.cfg fix which are applied upstream. - Resolves: rhbz#1307108���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛A- Add patches to allow the SunEC provider to be built with the system NSS install. - Re-generate source tarball so it includes ecc_impl.h. - Adjust tarball generation script to allow ecc_impl.h to be included. - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS) - Remove patch which disables the SunEC provider as it is now usable. - Correct spelling mistakes in tarball generation script. - Resolves: rhbz#1245810� ��}�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15V͛@- Move completely unrelated AArch64 gcc 6 patch into separate file. - Resolves: rhbz#1300630�A��g� �jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15V�I�- returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch - Resolves: rhbz#1300630c��gc�jvanek <jvanek@redhat.com> - 1:1.8.0.72-2.b15V�@- sync from fedora - Resolves: rhbz#1300630w��}u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Actually add the patch... - Resolves: rhbz#1300630�;��}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15V��- Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - Resolves: rhbz#1300630�4��}�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲA- Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558 - Resolves: rhbz#1307108���}�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15VŲ@- Only use z format specifier on s390, not s390x. - Resolves: rhbz#1307108���}�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le. - Remove aarch64-specific suffix as update/build version are now the same as for other archs. - Resolves: rhbz#1307108�m��}�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15V�`�- Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches unconditionally to avoid arch-specific patch failures. - Resolves: rhbz#1307108 f L� n y � � D �k� �gq�9s f ���6o�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14WV�A- added --family option with chkconfig version full dependence - added nss restricting requires - added zipped javadoc subpackage - extracted lua scripts - Resolves: rhbz#1296442 - Resolves: rhbz#1296414�A��5o��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14WV�@- added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654 - Resolves: rhbz#1296442���4}�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Forwardport SSL fix to only report curves supported by NSS. - Resolves: rhbz#1245810���3}�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-3.b14WP �- Add fix for ppc64le crash due to illegal instruction. - Resolves: rhbz#1341258�q��2}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14WN�@- Add fix for PKCS#10 output regression, adding -systemlineendings option. - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet. - Resolves: rhbz#1337583�$��1}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14WF�@- Update to u92b14. - Remove upstreamed patches for AArch64 byte behaviour and template issue. - Remove upstreamed patches for Zero build failures 8087120 & 8143855. - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112. - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell. - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues. - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92 - Resolves: rhbz#1335322x��0}w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-3.b14W5��- Add backport for S8148752. - Resolves: rhbz#1330188�&��/}�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-2.b14W@- Add fix for PR2934 / RH1329342 - Re-enable ECDSA test which now passes. - Resolves: rhbz#1245810�/��.}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �F- Roll back release number as release 1 never succeeded, even with tests disabled. - Resolves: rhbz#1325423�F��-}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �E- Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error) - Enable full bootstrap on all architectures to check we are good to go. - Resolves: rhbz#1325423� ��,}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �D- Turn tests back on or build will not fail. - Resolves: rhbz#1325423�1��+}�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �C- Temporarily remove power64 from JIT arches to see if endian issue appears on Zero. - Resolves: rhbz#1325423�$��*}�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �B- Turn off Java-based checks in a vain attempt to get a complete build. - Resolves: rhbz#1325423�Q��)}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �A- Turn off -Werror so s390 can build in slowdebug mode. - Add fix for formatting issue found by previous s390 build. - Resolves: rhbz#1325423�p��(}�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W �@- Revert settings to production defaults so we can at least get a build. - Switch to a slowdebug build to try and unearth remaining issue on s390x. - Resolves: rhbz#1325423���'}�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Disable ECDSA test for now until failure on RHEL 7 is fixed. - Resolves: rhbz#1325423�;��&}�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to Zero. - Turn on bootstrap build for all to ensure we are now good to go. - Resolves: rhbz#1325423z��%}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Add 8132051 port to AArch64. - Resolves: rhbz#1325423�/��$}�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14W ��- Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway. - Resolves: rhbz#1325423 � i� u � % r �9g��%�� M � �-��I�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14W�;�- Runtime native library requirements need to match the architecture of the JDK - Resolves: rhbz#1375224�9��H�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14W�^@- Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750) - Resolves: rhbz#1359857�b��Gq�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W��- declared check_sum_presented_in_spec and used in prep and check - it is checking that latest packed java.security is mentioned in listing - Resolves: rhbz#1295754�8��Fq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14W�#�- @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005) - Resolves: rhbz#1295754r��Ei�jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14W��- jjs provides moved to headless - Resolves: rhbz#1312019�Z��D�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14W�t@- Update to aarch64-jdk8u102-b14. - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102. - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31. - Move 8158260 to 8u112 section following its backport to 8u. - Resolves: rhbz#1359857���C�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15W��- Update to aarch64-jdk8u101-b15. - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching. - Drop additional hunk for 8147771 which is now applied upstream. - Resolves: rhbz#1359857�J��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch. - Resolves: rhbz#1358661�M��A� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13W�9�- Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch - Resolves: rhbz#1360863�<��@q� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13W��- added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation - rhbz1358661 - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks - rhbz1204159 - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64 - rhbz1360863 - added all virtual provides of java-devel - Resolves: rhbz#1216018t��?q{�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-5.b13W��- added Provides: /usr/bin/jjs - Resolves: rhbz#1312019�.��>�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13W��@- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1335322�*��=�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13W�8�- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350037� ��<�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Add workaround for a typo in the CORBA security fix, 8079718 - Resolves: rhbz#1350037�%��;�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13WzO�- Fix regression in SSL debug output when no ECC provider is available. - Resolves: rhbz#1346460�z��:�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13Wv[A- Update to u101b13. - Document REPOS option in generate_source_tarball.sh - Drop a leading zero from the priority as the update version is now three digits - Resolves: rhbz#1350037�7��9}�s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14Wv[@- Add additional fixes (S6260348, S8159244) for u92 update. - Add bug ID to Javadoc patch. - Resolves: rhbz#1335322� ��8o�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-7.b14Wi,@- family restricted by arch - Resolves: rhbz#1296442 - Resolves: rhbz#1296414���7}�)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-6.b14Wg�- Update ppc64le fix with upstream version, S8158260. - Resolves: rhbz#1341258 � r � U � � 9 { ���Br�o�a � ���\�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Restore .gitignore lines removed by "Fedora sync" - Resolves: rhbz#1400306�$��[�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Patch OpenJDK to check the system cacerts database directly - Remove unneeded symlink to the system cacerts database - Drop outdated openssl dependency from when the RPM built the cacerts database - Resolves: rhbz#1319875�`��Z�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Regenerate tarball with correct version of PR2126 patch. - Update generate_source_tarball.sh script to download correct version. - Resolves: rhbz#1400306� ��Y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14X�Z�- Properly document recently added patches. - Resolves: rhbz#1400306q��Xi}�jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14X�fA- shenandoah enabled on aarch64 - Resolves: rhbz#1400306�K��Wi�/�jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14X�f@- added shenandoah hotspot - sync with fedora - Resolves: rhbz#1400306 - Resolves: rhbz#1390708 - Resolves: rhbz#1388520 - Resolves: rhbz#1403992�O��V�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13X��@- Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments" - Resolves: rhbz#1390708�L��U��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13X��- Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command" - Resolves: rhbz#1284948�)��T�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13X|��- Update to aarch64-jdk8u121-b13. - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted) - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Resolves: rhbz#1410612���S�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X|��- Fix accidental change of line in updated size_t patch. - Resolves: rhbz#1391132���R�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16X{d@- Update to aarch64-jdk8u112-b16. - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122. - Re-generate size_t and key size (RH1163501) patches against u112. - Resolves: rhbz#1391132�0��Q�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18Xwo�- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target - Resolves: rhbz#1391132�9��P�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{A- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122. - Resolves: rhbz#1391132�9��O�u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18Xs{@- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes - Resolves: rhbz#1391132�,��N�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15X l�- Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it. - Resolves: rhbz#1391132�(��M�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b15W���- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1382736� ��L�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15W��A- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591. - Resolves: rhbz#1382736�u��K�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14W��@- Update to aarch64-jdk8u111-b14. - Add latest md5sum for java.security file due to jar signing property addition. - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111. - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy. - Resolves: rhbz#1350037� ��Jq�#�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-5.b14W��@- debug subpackages allowed on aarch64 and ppc64le - Resolves: rhbz#1375224 � �1 C � � ��a�K�R� w� � �=��o��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12Y\�- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU. - Resolves: rhbz#1466509�U��ns�9�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12Y?�- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles - 1183793 is missing blocker - Resolves: rhbz#1448880�#��mm�[�Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12Y.�@- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change - Resolves: rhbz#1448880� ��l�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-9.b12Y �A- Move 8175813/PR3394/RH1448880 to correct section and document. - Resolves: rhbz#1448880� ��kq�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-9.b12Y �@- Added and applied patch550 8175813-rh1448880.patch - Resolves: rhbz#1448880�-��j�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12Y��- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802) - Resolves: rhbz#1319875���i� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-7.b12Y#@- Fix misspelt accessibility Provides - Resolves: rhbz#1438514�:��h�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12Y�@- Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix - Resolves: rhbz#1443417d��gq[�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-5.b11X��@- Minor tweaks - Resolves: rhbz#1438514�)��f�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11X���- Rename SystemTap tapset tarball to avoid conflicts with previous version. - Resolves: rhbz#1438514� ��e�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b11X�- Bump release to make sure y-stream takes priority over z-stream. - Resolves: rhbz#1438514�`��d�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11X�hA- Update tapset tarball to include the better error handling in PR3348 - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3 - Resolves: rhbz#1438514�?��c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11X�h@- Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update generate_source_tarball.sh to remove patch remnants. - Cleanup Shenandoah tarball referencing and document how to create it. - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing) - Resolves: rhbz#1438751�'��b��M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�A- Add backports from 8u131 and 8u152 ahead of April CPU. - Apply backports before local RPM fixes so they will be the same as when applied upstream - Adjust RH1022017 following application of 8173783 - Resolves: rhbz#1438751�C��a���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14X�@- Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install - Resolves: rhbz#1429774���`�9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X��@- Actually fix SystemTap source tarball name to match new one - Resolves: rhbz#1373848�i��_�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14X�!@- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Update jstack tapset to handle AArch64 - Resolves: rhbz#1373848x��^i� �jvanek <jvanek@redhat.com> - 1:1.8.0.121-8.b14XƉ�- self-sependencies restricted by isa - Resolves: rhbz#1388520�N��]i�5�jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14X��@- updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot - Resolves: rhbz#1400306 � S � � ' 0 � o�-b�^�*. � |��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BB- Update location of policy JAR files following 8157561.�w�� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�BA- 8188030 is not yet upstream, so it should be listed under upstreamable fixes. - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162. - Resolves: rhbz#1499207�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y�B@- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost. - Resolves: rhbz#1499207z��~q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b01Y���- Moving patch 560 out of ppc fixes - Resolves: rhbz#1499207�+��}�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139. - Resolves: rhbz#1499207���|�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y���- Fix premature shutdown of NSS in SunEC provider. - Resolves: rhbz#1499207�:��{�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle. - Resolves: rhbz#1499207���z�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12Y��- Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12. - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028). - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support). - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output) - Update RH1163501 to accomodate 8181048 (crypto refactoring) - Resolves: rhbz#1499207�)��y�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y�@- Reverted completely unnecessary patch addition which broke the RPM build. - Resolves: rhbz#1484079|��xq� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-2.b01Y��- smuggled patch540, bug1484079.patch - Resolves: rhbz#1484079�=��w�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap - Resolves: rhbz#1499207���v�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Y��- Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix - Resolves: rhbz#1498309 - Resolves: rhbz#1498319 - Resolves: rhbz#1498320 - Resolves: rhbz#1498321 - Resolves: rhbz#1484079�!��u�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01Yܶ@- Backport Montgomery multiply intrinsic and dependencies for ppc64 - Resolves: rhbz#1498309�r��t�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01Y��@- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01. - Exclude 8175887 from Shenandoah builds as it has been included in that repo. - Resolves: rhbz#1477855�&��s�O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-3.b16Y���- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree - Resolves: rhbz#1459641�n��r�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16Yh�@- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509� ��q��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\��- Actually add sources for previous commit. - Resolves: rhbz#1466509�(��p�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15Y\�- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15. - Update location of OpenJDK system library source code in remove-intree-libraries.sh - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097. - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110. - Resolves: rhbz#1466509 � 0o � � � �'wZ��O�? � �#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-0.b10Z�=�- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10. - Resolves: rhbz#1559766�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12Z�I@- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12. - Remove upstreamed patches for 8181055/PR3394/RH1448880, - 8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309, - 8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and - 8181810/PR3466/RH1498319. - Resolves: rhbz#1559766����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b14ZX�@- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le - Resolves: rhbz#1528233����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b14ZV @- Update to b14 with updated Zero fix for 8174962 (S8194828) - Resolves: rhbz#1528233�8���s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13ZT��- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update - Resolves: rhbz#1528233�*�� �W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12ZS]@- Replace tarballs with version including AArch64 fix for 8174962 (S8194686) - Resolves: rhbz#1528233��� q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12ZKt@- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao) - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948), 8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880), 8175887 and 8180048 (RH1449870).(mbalao) - drop more of usptreamed patches 565,566,567,568 ( 8184673-pr3475-rh1487266.patch 8191840-pr3503-rh1512647.patch 8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch) - Resolves: rhbz#1528233�+�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7) - Resolves: rhbz#1512647�B�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version. - Resolves: rhbz#1508017�(�� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16Z:P�- Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16. - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC) - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226, - 8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and - 8164293/PR3412/RH1459641 - Resolves: rhbz#1508017�H����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13Z ,@- Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13. - Drop upstreamed patch for 8075484. - Resolves: rhbz#1508017����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-4.b12Y�@- Bump release number so it remains higher than z-stream. - Resolves: rhbz#1459641����!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��C- Add backport of 8184673/PR3475/RH1487266 patch. - Resolves: rhbz#1487266�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��B- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" - Resolves: rhbz#1490260����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��A- Add backport of 8146086/PR3439/RH1478402 JAXWS fix. - Resolves: rhbz#1478402�<���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12Y��@- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix - Resolves: rhbz#1499207�K��q�'�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12Y�BC- repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207 � P� � ( r � 7 � �c�� � �$��!�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11[!@- Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags. - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags. - Resolves: rhbz#1573700�4�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ dA- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575) - Resolves: rhbz#1567204�6�� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11[ d@- Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546) - Resolves: rhbz#1573700�|�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11[ A- Update Shenandoah tarball to include 2018-05-15 merge. - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds. - Drop PR3573 patch applied upstream. - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball. - Resolves: rhbz#1573700��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11[ @- Sync with IcedTea 3.8.0. - Label architecture-specific fixes with architecture concerned - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround) - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds - 8185723, PR3553: Zero: segfaults on Power PC 32-bit - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe - PR3559: Use ldrexd for atomic reads on ARMv7. - 8187577, PR3578: JVM crash during gc doing concurrent marking - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 - Resolves: rhbz#1573700� �� q�%�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-2.b11Z� @- added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578558�#���I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-1.b11Z��- Update to aarch64-jdk8u172-b11 and aarch64-shenandoah-jdk8u172-b11. - Resolves: rhbz#1573700�Z���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12Z�- Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12. - Remove patch for 8200556/PR3566 as applied upstream. - Resolves: rhbz#1573700� ���C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-8.b10Z�3@- Bump release to 8 so it is again greater than the 7.5.z version. - Resolves: rhbz#1559766�2���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10Z�JB- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) - Resolves: rhbz#1559766�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10Z�JA- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones - Resolves: rhbz#1559766���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-5.b10Z�J@- Add fix for TCK crash on Shenandoah. - Resolves: rhbz#1559766�S���)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10Z�@- Cleanup from previous commit. - Remove unused upstream patch 8167200.hotspotAarch64.patch. - Resolves: rhbz#1559766 - Resolves: rhbz#1536623�B��q��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10Z��@- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch - Resolves: rhbz#1559766�+���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10Z��- Bump release for RHEL 7.6 now branch is available. - Resolves: rhbz#1538772 - Resolves: rhbz#1559766 � �4 � � e | � �� y��C� 3� � x��7u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Actually add the patch... - Resolves: rhbz#1594249���6�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Attempt to fix Shenandoah build issues on s390. - Resolves: rhbz#1594249���5�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[U�@- Use the Shenandoah HotSpot on all architectures. - Resolves: rhbz#1594249�Q��4�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13[L��- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249���3�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�!��2�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-7.b04[L��- Fix requires/provides filters for internal libs. See RHBZ#1590796 - Resolves: rhbz#1594249� ��1��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b04[L��- Update bug status and add missing bug IDs - Resolves: rhbz#1594249�E��0� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04[GB�- Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage" - Resolves: rhbz#1463098�Y��/�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04[E�@- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list" - Resolves: rhbz#1597825���.�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eB- Mark bugs now backported to OpenJDK 8u upstream - Resolves: rhbz#1594249�:��-�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;eA- Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails" - Resolves: rhbz#1568033�;��,�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04[;e@- Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo" - Resolves: rhbz#1582032���+�!�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181-3.b04[3|B- Add hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249�/��*�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04[3|A- Mark bugs that have been pushed to 8u upstream and are scheduled for a release. - Resolves: rhbz#1594249�#��)�I�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04[3|@- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04. - Resolves: rhbz#1594249�d��(�K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03[/��- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03. - Remove AArch64 patch for PR3458/RH1540242 as applied upstream. - Resolves: rhbz#1594249���'��/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11[+�@- Update Shenandoah tarball to fix TCK overflow failure. - Resolves: rhbz#1573700�M��&u�'�Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11[*A�- jsa files changed to 444 to pass rpm verification - Fix reg-ex for filtering private libraries' provides/requires. - Resolves: rhbz#1573700�/��%�a�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[*A�- Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651 - Resolves: rhbz#1573700�'��$�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[(�@- Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds. - Resolves: rhbz#1573700�5��#�m�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11['��- Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64. - Resolves: rhbz#1573700� ��"� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11[$��- Sync with IcedTea 3.8.0 patches to use -Wreturn-type. - Add backports of 8141570, 8143245, 8197981 & 8062808. - Drop pr3458-rh1540242-zero.patch which is covered by 8143245. - Resolves: rhbz#1573700 l�C � l | ��9��3� �X��G�3�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5[�A- Removed patch, rh1214835.patch, since it's invalid: See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3 - Resolves: rhbz#1633817�D��F� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4[�@- Update(s) from upstreamed patches: - jdk8036003-add_with_native_debug_symbols_configure_flag.patch - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch => jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch Deleted rh1176206-root.patch as thats no longer needed with upstream 8150954. - 8207057-pr3613-hotspot-assembler-debuginfo.patch => jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u backport. - Use --with-native-debug-symbols=internal which JDK-8036003 adds. - Remove comment for make invocation since it's no longer valid. --with-native-debug-symbols=internal will do everything we need. - Resolves: rhbz#1633817�$��Eq�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3[� @- cups moved to headful package - enabled gtk2 in headful package (RH1598152) - Resolves: rhbz#1633817�:��Dq��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2[��@- made rhpkg and srpm or rebuild working on fedora again - cosmetic changes - using macros where possible - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information) - README.src renamed to README.md - Resolves: rhbz#1633817� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-1[��@- Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817� ��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-1[�R@- Bump release to be greater than rhel-7.5.z - Resolves: rhbz#1633817�<��A�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0[�]�- Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817� ��@�C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� A- Add new Shenandoah patch PR3634 as upstream still fails on s390. - Resolves: rhbz#1633822�X��?�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0[� @- Update to aarch64-shenandoah-jdk8u181-b16. - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream. - Resolves: rhbz#1633822�k��>�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0[~��- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u. - Update to aarch64-shenandoah-jdk8u181-b15. - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds. - Move buildver to where it should be in the OpenJDK version. - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620). - Update pr3539-rh1548475.patch to apply after 8187045. - Resolves: rhbz#1594249���=�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[n�- Remove unneeded functions from ppc shenandoahBarrierSet. - Resolves: rhbz#1594249�!��<�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[j�@- Add missing shenandoahBarrierSet implementation for ppc64{be,le}. - Resolves: rhbz#1594249���;�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Fix wrong format specifiers in Shenandoah code. - Resolves: rhbz#1594249� ��:�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- Avoid changing variable types to fix size_t, at least for now. - Resolves: rhbz#1594249���9��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[i��- More size_t fixes for Shenandoah. - Resolves: rhbz#1594249���8�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-8.b13[dC�- Add additional s390 size_t case for Shenandoah. - Resolves: rhbz#1594249 I � � 0 b�5��$j� ��I �0��W�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2\<y�- Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64. - Resolves: rhbz#1498936�U��V�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1\73�- Update to aarch64-shenandoah-jdk8u191-b14. - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport. - Resolves: rhbz#1661577�-��U�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1\5�@- Update to aarch64-shenandoah-jdk8u191-b13. - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes. - Use remove-intree-libraries.sh to remove the remaining SunEC code for now. - Resolves: rhbz#1661577�O��T�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15\2�- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply - Resolves: rhbz#1633817���S�� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-14\l@- Added %global _find_debuginfo_opts -g - Resolves: rhbz#1656996�5��R� �_�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13[��@- Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider. - Resolves: rhbz#1477159� ��Q��=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12[�A- Revise Shenandoah PR3634 patch following upstream discussion. - Resolves: rhbz#1633817�B��Ps��Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11[�@- Renamed all patches to new convention - bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch - Resolves: rhbz#1633817�!��Os�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-10[��- Headful Requires of cups, replaced by Requires of cups-libs in headless - Resolves: rhbz#1598152�-��N�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[��- Note why PR1834/RH1022017 is not suitable to go upstream in its current form. - Resolves: rhbz#1633817w��Ms�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�B- Document patch sections. - Resolves: rhbz#1633817�I��L��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�A- Fix patch organisation in the spec file: - * Move ECC patches back to upstreamable section - * Move system cacerts patches to upstreamable section - * Merge "Local fixes" and "RPM fixes" which amount to the same thing - * Move system libpng & lcms patches back to 8u upstreamable section - * Make it clearer that "Non-OpenJDK fixes" is currently empty - Resolves: rhbz#1633817���K�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9[�@- Bump release so y-stream is higher than z-stream. - Resolves: rhbz#1633817�t��Jq�y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8[�D- added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch - Resolves: rhbz#1633817�D��I� �Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7[�C- Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch: - Annother fix for optimization gaps (annocheck issues) - Zero 8u version fix was missing. Hence, only shows up on Zero arches. - Resolves: rhbz#1633817�s��H�i�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6[�B- Add fixes for optimization gaps (annocheck issues): - 8210761: libjsig is being compiled without optimization - 8210647: libsaproc is being compiled without optimization - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization 8u upstream and aarch64/jdk8u upstream versions. - Resolves: rhbz#1633817 J � 3 � ��Z� }��� � J � ��e�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468���d�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��A- Add cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468�J��c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��@- Update to aarch64-shenandoah-jdk8u212-b02. - Remove patches included upstream - JDK-8197429/PR3546/RH153662{2,3} - JDK-8184309/PR3596 - JDK-8210647/RH1632174 - JDK-8029661/PR3642/RH1477159 - Re-generate patches - JDK-8203030 - Resolves: rhbz#1693468�I��b��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1\��@- Update to aarch64-shenandoah-jdk8u202-b08. - Remove patches included upstream - JDK-8211387/PR3559 - JDK-8207057/PR3613 - JDK-8165852/PR3468 - JDK-8073139/PR1758/RH1191652 - JDK-8044235 - JDK-8172850/RH1640127 - JDK-8209639/RH1640127 - JDK-8131048/PR3574/RH1498936 - JDK-8164920/PR3574/RH1498936 - Re-generate patches - JDK-8210647/RH1632174 - Resolves: rhbz#1693468�Q��a�%�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1\��- Update to aarch64-shenandoah-jdk8u201-b13. - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream. - Resolves: rhbz#1693468�~��`��Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5\�N�- Update patch for RH1566890. - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Added dependent patch, rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Resolves: rhbz#1693468� ��_�=�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-4\�Z@- Drop NSS runtime dependencies and patches to link against it. - Resolves: rhbz#1656676�3��^� �]�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3\��- Sync SystemTap & desktop files with upstream IcedTea release using new script - Resolves: rhbz#1434241���]m�9�Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-3\��- Change handling of SystemTap tarball, removing Java version - Resolves: rhbz#1434241� ��\m��Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2\w�@- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs. - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc� ��[��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1\? �- Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577�)��Z�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�"��Y�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Add 8160748 for AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577�!��X�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1\? �- Update to aarch64-shenandoah-jdk8u192-b12. - Remove patches included upstream - JDK-8031668/PR2842 - JDK-8148351/PR2842 - JDK-6260348/PR3066 - JDK-8061305/PR3335/RH1423421 - JDK-8188030/PR3459/RH1484079 - JDK-8205104/PR3539/RH1548475 - JDK-8185723/PR3553 - JDK-8186461/PR3557 - JDK-8201509/PR3579 - JDK-8075942/PR3602 - JDK-8203182/PR3603 - JDK-8206406/PR3610/RH1597825 - JDK-8206425 - JDK-8036003 - JDK-8201495/PR2415 - JDK-8150954/PR2866/RH1176206 - Re-generate patches (mostly due to upstream build changes) - JDK-8073139/PR1758/RH1191652 - JDK-8143245/PR3548 (due to JDK-8202600) - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170) - JDK-8199936/PR3533 - JDK-8199936/PR3591 - JDK-8207057/PR3613 - JDK-8210761/RH1632174 (due to JDK-8207402) - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509) - PR3593 (due to JDK-8081202) - RH1566890/CVE-2018-3639 (due to JDK-8189170) - RH1649664 (due to JDK-8196516) - Resolves: rhbz#1661577 � m � O � � u}����H�X � � ��x��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-1]'$�- Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452�4��w�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0B- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version. - Resolves: rhbz#1724452�3��v�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2]#0A- Provide Javadoc debug subpackages for now, but populate them from the normal build. - Resolves: rhbz#1724452�1��u�e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1]#0@- Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452�D��t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea]GA- Update to aarch64-shenandoah-jdk8u222-b08. - Adjust PR3083/RH134640 to apply after JDK-8182999 - Resolves: rhbz#1724452���s� �+�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-0.3.ea]G@- Include 'ea' designator in Release when appropriate. - Resolves: rhbz#1724452�j��r�W�Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2]^@- Don't produce javadoc/javadoc-zip sub packages for the debug variant build. - Don't perform a bootcycle build for the debug variant build. - Resolves: rhbz#1724452�*��q�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1] �- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13. - Resolves: rhbz#1724452� ��p��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b06-1]�@- Update to aarch64-shenandoah-jdk8u222-b06. - Resolves: rhbz#1724452� ��o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b05-1\� @- Update to aarch64-shenandoah-jdk8u222-b05. - Resolves: rhbz#1724452�U��n�-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1\�.@- Update to aarch64-shenandoah-jdk8u222-b04. - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream. - Resolves: rhbz#1705328�s��m�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately. - Drop unused use_shenandoah_hotspot variable. - Resolves: rhbz#1705328���l� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1\�9�- Update to aarch64-shenandoah-jdk8u222-b03. - Set milestone to "ea" as this is not the final release. - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u. - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes. - Resolves: rhbz#1705328�g��k�Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1\�\@- Update to aarch64-shenandoah-jdk8u222-b02. - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100). - Resolves: rhbz#1705328�a��j�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1\��- Update to aarch64-shenandoah-jdk8u222-b01. - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575. - Drop 8171000, 8197546 & PR3634 as applied upstream. - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp - Resolves: rhbz#1705328� ��i��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1\�,A- Update to aarch64-shenandoah-jdk8u212-b04. - Resolves: rhbz#1693468� ��h��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b03-1\�,@- Update to aarch64-shenandoah-jdk8u212-b03. - Resolves: rhbz#1693468���g�/�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-2\���- Rebase tarball so the AArch64 fix is included upstream - Resolves: rhbz#1693468�s��f�i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1\��- Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions - Yet another cast to resolve s390 ambiguity in call to log2_intptr - Resolves: rhbz#1693468 � (� � i Z o � E ��fN��ws� � �4�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1^ ��- Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints. - Resolves: rhbz#1785753�"�� � �;�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-2^ ��- Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. - Resolves: rhbz#1785753��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1^ [�- Update to aarch64-shenandoah-jdk8u242-b07. - Switch to GA mode for final release. - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829. - Resolves: rhbz#1785753�l��� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea^�- Update to aarch64-shenandoah-jdk8u242-b05. - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102. - Revise b05 snapshot to include JDK-8236178. - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run - Resolves: rhbz#1785753�%��� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea^��- Update to aarch64-shenandoah-jdk8u242-b01. - Switch to EA mode. - Resolves: rhbz#1785753�7��� �e�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5]�Z�- Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup. - Resolves: rhbz#1785753����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4]�e@- Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve. - Regenerate source tarball using the updated script and add the -'4curve' suffix. - Resolves: rhbz#1746874�-���]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3]��@- Mark net.properties as a config file (based on Fedora patch by James Cassell) - Resolves: rhbz#1710928����-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2]µ�- Add backport of JDK-8231991 (mouse wheel focus issue) - Resolves: rhbz#1741676�y���u�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1]�n�- Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b08-0.1.ea]�?�- Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz#1737109��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b07-0.1.ea]�@- Update to aarch64-shenandoah-jdk8u232-b07. - Resolves: rhbz#1737109���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b06-0.1.ea]� @- Update to aarch64-shenandoah-jdk8u232-b06. - Resolves: rhbz#1737109�f��~� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea]��- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09. - Update version logic to handle -shenandoah* tag suffix. - Resolves: rhbz#1737109� ��}� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea]p��- Update to aarch64-shenandoah-jdk8u232-b05. - Drop upstreamed patch JDK-8141570/PR3548. - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570. - Resolves: rhbz#1737109���|� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b04-0.1.ea][�- Update to aarch64-shenandoah-jdk8u232-b04. - Resolves: rhbz#1737109���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b03-0.1.ea]N��- Update to aarch64-shenandoah-jdk8u232-b03. - Resolves: rhbz#1737109���z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b02-0.1.ea]D%�- Update to aarch64-shenandoah-jdk8u232-b02. - Resolves: rhbz#1737109�S��y� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea]:�@- Update to aarch64-shenandoah-jdk8u232-b01. - Switch to EA mode. - Drop JDK-8210761/RH1632174 as now upstream. - Resolves: rhbz#1498932 � �# 8 � y � O ��N��[#��Hc � �A�� � �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea^�(@- Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates - Resolves: rhbz#1838229�`�� � �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea^���- Update to aarch64-shenandoah-jdk8u262-b05. - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05. - Resolves: rhbz#1838811��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b04-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b04. - Resolves: rhbz#1838811�,�� � �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.2.ea^��- Update to aarch64-shenandoah-jdk8u262-b03-shenandoah-merge-2020-05-20. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b03-0.1.ea^ۅA- Update to aarch64-shenandoah-jdk8u262-b03. - Resolves: rhbz#1838811�3��� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea^ۅ@- Enable JFR in our builds, ahead of upstream default. - Only enable JFR for JIT builds, as it is not supported with Zero. - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash. - Resolves: rhbz#1838811���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.1.ea^א�- Update to aarch64-shenandoah-jdk8u262-b02. - Resolves: rhbz#1838811���� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea^�a�- Update to aarch64-shenandoah-jdk8u262-b01. - Switch to EA mode. - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR - Adjust RH1648644 following context changes due to introduction of JFR packages - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr) - Resolves: rhbz#1838811�A��� �y�Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4^�@- Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled. - Resolves: rhbz#1751985� ���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��A- Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557�1���e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3^��@- Update to aarch64-shenandoah-jdk8u242-b09. - Switch to GA mode for final release. - Resolves: rhbz#1810557�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.2.ea^��- Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b08-0.1.ea^}�- Update to aarch64-shenandoah-jdk8u252-b08. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b07-0.1.ea^y�@- Update to aarch64-shenandoah-jdk8u252-b07. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b06-0.1.ea^oj@- Update to aarch64-shenandoah-jdk8u252-b06. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b05-0.1.ea^Y �- Update to aarch64-shenandoah-jdk8u252-b05. - Resolves: rhbz#1810557���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b04-0.1.ea^S��- Update to aarch64-shenandoah-jdk8u252-b04. - Resolves: rhbz#1810557�f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea^M#@- Update to aarch64-shenandoah-jdk8u252-b03. - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978 - Resolves: rhbz#1810557��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b02-0.1.ea^9\�- Update to aarch64-shenandoah-jdk8u252-b02. - Resolves: rhbz#1810557�C�� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea^.�- Update to aarch64-shenandoah-jdk8u252-b01. - Switch to EA mode. - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions. - Resolves: rhbz#1810557 J O� � W � |�.cZ�;�� J � ��1� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea_{ �- Update to aarch64-shenandoah-jdk8u272-b01. - Switch to EA mode. - Add debugging output for build. - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default. - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774 - Resolves: rhbz#1876665�$��0q�Y�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1_ ��- ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs - Resolves: rhbz#1861222�4��/�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0_ ��- Update to aarch64-shenandoah-jdk8u265-b01. - Update release notes for 8u265 release. - Resolves: rhbz#1860456�%��.�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-2_A@- Remove issues in NEWS file duplicated between 8u252 & 8u262 releases. - Resolves: rhbz#1838811�p��-�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1_ �@- Update to aarch64-shenandoah-jdk8u262-b10. - Switch to GA mode for final release. - Update release notes for 8u262 release. - Split JDK-8042159 patch into per-repo patches as upstream. - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk - Resolves: rhbz#1838811���,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea_ ��- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Introduce jfr_arches for architectures which support JFR. - Introduce sa_arches for architectures which support the serviceability agent. - Introduce share_arches for architectures which support class sharing (-Xshare:dump). - Resolves: rhbz#1838811�F��+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea_X@- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR. - Resolves: rhbz#1838811�+��*� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea_�- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03 - Resolves: rhbz#1838811���)� �)�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.2.ea_��- Sync alt-java support with java-11-openjdk version. - Resolves: rhbz#1838811���(� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea^��- Update to aarch64-shenandoah-jdk8u262-b09. - Resolves: rhbz#1838811���'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b08-0.1.ea^��@- Update to aarch64-shenandoah-jdk8u262-b08. - Resolves: rhbz#1838811�,��&� �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.3.ea^��- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18. - Resolves: rhbz#1838811�%��%{�Q�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b07-0.2.ea^�- Created copy of java as alt-java and adapted alternatives and man pages - Resolves: rhbz#1838811�B��$� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea^�@- Update to aarch64-shenandoah-jdk8u262-b07. - Drop JDK-8243541 backport now applied upstream. - Resolves: rhbz#1838811�I��#� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea^�y�- Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds - Sync stapinstall handling with RHEL 8 implementation - Need to support noarch for creating source RPMs for non-scratch builds. - Resolves: rhbz#1838811���"� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea^�(C- Update to aarch64-shenandoah-jdk8u262-b06. - Resolves: rhbz#1838811� ��!� �5�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.4.ea^�(B- Backport JDK-8186464 so ZIP64 archives < 4GB can be read. - Resolves: rhbz#1433262�,�� � �O�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.3.ea^�(A- Update to aarch64-shenandoah-jdk8u262-b05-shenandoah-merge-2020-06-04. - Resolves: rhbz#1838811 � �P f 4 @�w��Z� �0��@�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��?�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��>�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��=� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��<{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���;� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���:� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���9� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��8� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��7� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�S��5� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea_~�A- Update to aarch64-shenandoah-jdk8u272-b05. - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition. - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003 - Resolves: rhbz#1876665�e��4� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea_~�@- Update to aarch64-shenandoah-jdk8u272-b04. - Update tarball generation script to use PR3795, following inclusion of JDK-8177334 - Resolves: rhbz#1876665���3� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b03-0.0.ea_}��- Update to aarch64-shenandoah-jdk8u272-b03. - Resolves: rhbz#1876665���2� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea_|\@- Update to aarch64-shenandoah-jdk8u272-b02. - Remove JDK-8154313 backport now applied upstream. - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream. - Resolves: rhbz#1876665 B e � T � ��w>�B �:��P� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081�:��N� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea`@�- Update to aarch64-shenandoah-jdk8u292-b03 (EA) - Update release notes for 8u292-b03. - Resolves: rhbz#1938081�:��M� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea`>(�- Update to aarch64-shenandoah-jdk8u292-b02 (EA) - Update release notes for 8u292-b02. - Resolves: rhbz#1938081�4��L� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea`&m�- Update to aarch64-shenandoah-jdk8u292-b01 (EA) - Update release notes for 8u292-b01. - Switch to EA mode. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Resolves: rhbz#1938081���K�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��J�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��H� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��G� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��F� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��E� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��D� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���B{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690���A� �#�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea_�@- Update to aarch64-shenandoah-jdk8u282-b01 (EA) - Update release notes for 8u282-b01. - Switch to EA mode. - Require tzdata 2020b due to resource changes in JDK-8254177 - Remove PR3601, covered upstream by JDK-8062808. - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727. - Resolves: rhbz#1903903 ^ � + B � � v�W����4u ^ ���b�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��a� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��`� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��_� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��^� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��]� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��\� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��[� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��Z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���Y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���X�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��W�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��V� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��U� �k�Andrew Hughes <gnu.andrew@redhat.com>
